# US 2025/0097218 A1 · Integrated Second Factor Authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0097218 A1 - Document ID: US20250097218A1 - Status: Published application - Kind: A1 - Application number: 18/962,359 - Filed: 2024-11-27 - Published: 2025-03-20 - Earliest claimed: 2017-02-21 - Assignees: Google Inc. - Applicants: Google LLC - Inventors: Erica Wickstrom Brand; Marius Paul Michiel Schilder; Scott D. Johnson; Vincent Palatin - Web page: https://patentgrep.com/patent/US20250097218A1 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/041: Key generation or derivation - H04W 12/069: using certificates or pre-shared keys - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 2221/2113: Multi-level security, e.g. mandatory access control - G06F 2221/2153: Using hardware token as a secondary aspect - H04L 63/105: {Multiple levels of security} - H04L 2463/082: applying multi-factor authentication - H04W 12/68: Gesture-dependent or behaviour-dependent - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Techniques and apparatuses are described that enable integrated second factor authentication. These techniques and apparatuses enable the improved security of something you have without the accompanying inconvenience or chance of loss. To do so, a secure physical entity is integrated within a computing device. While this provides the something you have without a need to carry a separate object with you, the something you have also must not be able to be accessed remotely. To prevent remote access physical wires are connected from the secure physical entity to physical structures on the computing device. In this way, a hacker or cyber thief cannot convince an authentication system that the cyber attacker does indeed have the something you have because to do so the attacker must be in physical possession of the computing device. ## Claims ### Claim 1 A method comprising: determining, by a secure physical entity integrated with a computing device, a combination of inputs; receiving, by the secure physical entity, a first input of the combination of inputs, the first input comprising an indication of a selection of a first physical structure, the first physical structure integrated with the computing device or provided as a peripheral of the computing device; receiving, by the secure physical entity, a second input of the combination of inputs, the second input comprising an indication of proximity to a second physical structure, the second physical structure integrated with the computing device or provided as a peripheral of the computing device; determining, by the secure physical entity and based on the combination of inputs, that a user is in possession of the secure physical entity; and responsive to determining that the user is in possession of the secure physical entity, indicating, to an authenticator, that the user is in possession of the secure physical entity, the indicating effective to direct the authenticator to grant access to a resource of the computing device. ### Claim 2 (depends on 1) The method of claim 1, wherein determining that the user is in possession of the secure physical entity is based on a unique combination of the first input and the second input from two or more combinations of the first input and the second input. ### Claim 3 (depends on 2) The method of claim 2, wherein granting the user, by the authenticator, access to the resource of the computing device further comprises granting a first right to the resource of the computing device based on the first unique combination. ### Claim 4 (depends on 3) The method of claim 3, wherein granting the user, by the authenticator, access to the resource of the computing device further comprises granting a second right to the resource of the computing device based on the second unique combination, the second right differing from the first right. ### Claim 5 (depends on 2) The method of claim 2, wherein the first unique combination corresponds to a first user and the second unique combination corresponds to a second user. ### Claim 6 (depends on 1) The method of claim 1, wherein the secure physical entity is a silicon chip integral with an integrated circuit, motherboard, or other hardware of the computing device. ### Claim 7 (depends on 1) The method of claim 1, further comprising: determining, by the secure physical entity, that the combination of inputs match one of two or more unique input combinations stored in the secure physical entity. ### Claim 8 (depends on 1) The method of claim 1, wherein receiving the second input comprising the indication of the proximity to the second physical structure includes detecting motion by a proximity sensor. ### Claim 9 A system comprising: a computing device; a secure physical entity integrated with the computing device; and one or more storage devices storing instructions that, when executed by the computing device, cause the computing device to perform operations comprising: determining, by the secure physical entity integrated with the computing device, a combination of inputs; receiving, by the secure physical entity, a first input of the combination of inputs, the first input comprising an indication of a selection of a first physical structure, the first physical structure integrated with the computing device or provided as a peripheral of the computing device; receiving, by the secure physical entity, a second input of the combination of inputs, the second input comprising an indication of proximity to a second physical structure, the second physical structure integrated with the computing device or provided as a peripheral of the computing device; determining, by the secure physical entity, and based on the combination of inputs, that a specific user, between at least a first user and a second user, is in possession of the secure physical entity; and granting specific rights, based on determining the specific user, to resources of the computing device. ### Claim 10 (depends on 9) The system of claim 9, wherein receiving the second input comprises receiving the second input simultaneously with receiving the first input. ### Claim 11 (depends on 9) The system of claim 9, wherein the first physical structure includes a contact with a touch sensor. ### Claim 12 (depends on 9) The system of claim 9, wherein receiving the second input comprising the indication of a proximity to a second physical structure includes detecting motion by a proximity sensor. ### Claim 13 (depends on 9) The system of claim 9, wherein the operations further comprise responsive to determining, by the secure physical entity, possession of the secure physical entity, enabling use of a resource of the computing device. ### Claim 14 (depends on 9) The system of claim 9, wherein the secure physical entity comprises a silicon chip integral with an integrated circuit, motherboard, or other hardware of the computing device. ### Claim 15 (depends on 9) The system of claim 9, wherein the operations further comprise: determining, by the secure physical entity, whether the combination of inputs match one of multiple unique input combinations stored in the secure physical entity. ### Claim 16 (depends on 15) The system of claim 15, wherein the operations further comprise: responsive to the combination of inputs not matching one of the multiple unique input combinations, denying access to a resource of the computing device. ### Claim 17 One or more non-transitory computer storage media encoded with instructions that when executed by a computing device having a secure physical entity integrated with the computing device cause the computing device to perform operations comprising: determining, by the secure physical entity integrated with the computing device, a combination of inputs; receiving, by the secure physical entity, a first input of the combination of inputs, the first input comprising an indication of a selection of a first physical structure, the first physical structure integrated with the computing device or provided as a peripheral of the computing device; receiving, by the secure physical entity, a second input of the combination of inputs, the second input comprising an indication of proximity to a second physical structure, the second physical structure integrated with the computing device or provided as a peripheral of the computing device; and determining, by the secure physical entity, and based on the combination of inputs, that a specific user is in possession of the secure physical entity. ### Claim 18 (depends on 17) The one or more non-transitory computer storage media of claim 17, wherein receiving the second input comprises receiving the second input simultaneously with receiving the first input. ### Claim 19 (depends on 17) The one or more non-transitory computer storage media of claim 17, wherein the first physical structure includes a contact with a touch sensor. ### Claim 20 (depends on 17) The one or more non-transitory computer storage media of claim 17, wherein receiving the second input comprising the indication of a proximity to a second physical structure includes detecting motion by a proximity sensor.