# US 8,751,794 B2 · System and method for secure nework login

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,751,794 B2
- Document ID: US8751794B2
- Status: Granted
- Kind: B2
- Application number: 13/338,505
- Filed: 2011-12-28
- Published: 2013-07-04
- Granted: 2014-06-10
- Earliest claimed: 2011-12-28
- Assignees: Pitney Bowes Inc.
- Applicants: Jens Haulund
- Inventors: Jens Haulund
- Web page: https://patentgrep.com/patent/US8751794B2

## CPC

- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04L 2209/80: Wireless
- H04W 12/77: Graphical identity
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Systems and methods for providing an expedited login process that is relatively fast and that still provides a reasonable level of security and a reasonable method for mitigating compromised login information are described. In one configuration, a web server sends an anonymous unique machine readable login identifier code to a browser display of a client computer. A server account holding user then uses his smartphone to scan the code and send a message including the login identifier code and a smartphone identifier code to the server. The server obtains the identity of the user and authenticates the user by determining possession of the smartphone using the smartphone identifier. The server then uses the login identifier code to log the user into the server and into the user account at the client computer.

## Claims

### Claim 1

A computer implemented method executing on a server computer for a user using a client device to login to an account session with the server computer comprising:
receiving an access request from user using the client device via a network;
sending a two dimensional barcode including a unique login ID to the client device;
receiving a user identifier and the unique login ID from a personal user device;
using the user identifier to obtain a public key for the user;
encrypting a session ID using the public key;
encoding the session ID in a second two dimensional barcode;
sending the second two dimensional barcode to the client device via the network;
receiving from the personal user device the session ID in decrypted form;
determining that the session ID received from the personal user device is identical to the session ID included in the second two dimensional barcode; and
redirecting the access request from the user using the client device to a signed in account session for the user with the server computer.