Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/44—Program or device authentication
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities

Definitions

• the devices 135A-C are devices with embedded systems 150A-C, and may include, for example, electrical appliances such as refrigerators, ovens, washers, driers, dishwashers, thermostats, alarms, air conditioners, televisions, radios, receivers, amplifiers, and so forth.
• the devices 135A-C may also include consumer devices such as digital watches, music players, game consoles, digital cameras, printers, and so forth.
• Other examples of devices 135A-C include stationary devices such as HVAC systems, traffic lights, factory controllers, signs, electronic billboards, sprinkler systems, and irrigation control systems, as well as medical devices.
• Devices 135A-C may also be any other type of device that includes an embedded system.
• the communication module may communicate using Global Systems for Mobile Communications (GSM), Code-Division Multiple Access (CDMA), Universal Mobile Telecommunications Systems (UMTS), 3GPP Long Term Evaluation (LTE), Worldwide Interoperability for Microwave Access (WiMAX), or any other second generation wireless telephone technology (2G), third generation wireless telephone technology (3G), fourth generation wireless telephone technology (4G) or other wireless telephone technology.
• GSM Global Systems for Mobile Communications
• CDMA Code-Division Multiple Access
• UMTS Universal Mobile Telecommunications Systems
• LTE 3GPP Long Term Evaluation
• WiMAX Worldwide Interoperability for Microwave Access
• 2G second generation wireless telephone technology
• 3G third generation wireless telephone technology
• 4G fourth generation wireless telephone technology
• User account service 180 may use the credentials to authenticate the application to a particular user account. Once the application is authenticated, user account service 180 may provide a session token to the application. This session token may be used to identify the particular user account that the application is logged into as well as a role or roles of the user account, devices that the user account has permission to access (e.g., devices owned by the holder of the user account), and so on. The application may then provide the session to token to other WAN accessible services 130 (e.g., device service 175 and/or registration service
• a user account may gain access to a device 135A-C by registering that device to the user account or by another user account sharing access to the device 135A-C. Registration of the device causes the device to be bound to a particular user account.
• Registration service 185 may identify and select a registration service that is supported by both the remote control application 1 15 and a device 135A- C, and then instruct the remote control application 115 and device 135A-C to use the selected registration technique.
• the remote control application 1 15 supports only a single registration technique that is the same as a single registration technique supported by the device, then the device and remote control application may automatically apply that single registration technique.
• the remote control application 250 provides the session token 260 to registration service 202, and may request registration of a new device (e.g., of unregistered device 270).
• the remote control application 250 automatically detects unregistered device 270 and sends a registration request to the registration service 202.
• the registration request may include information about the detected device, such as an internet protocol (IP) address, a media access control (MAC) address, a serial number, identifying information of a LAN that the device is connected to, location information, or other information that can be used to uniquely identify the device.
• IP internet protocol
• MAC media access control
• Registration technique selector 206 may apply one or more registration technique selection rules 222 to select a registration technique.
• a simple registration technique selection rule is applied that selects a registration technique based on overlapping registration techniques. If a single overlapping registration technique is identified, registration technique selector 206 may select the overlapping registration technique and notify the remote control application 250 and/or the unregistered device 270 of the registration technique to use. If multiple overlapping registration techniques are identified, then registration technique selector 206 may determine which of the overlapping registration techniques to select.
• a registration technique selection rule 222 may indicate that a registration selection technique with a highest security level is to be applied.
• remote control application 250 may connect to the unregistered device 270 directly or via a LAN.
• the unregistered device 270 may send the unique code to the remote control application 250 via the connection.
• unregistered device 270 broadcasts the unique code.
• unregistered device 270 begins broadcasting the unique code responsive to a user pushing a button on the unregistered device 270.
• Remote control application 250 and unregistered device 270 may send the unique code to the remote control application 250.
• Registration service 202 compares the unique code received from the remote control application 250 to the unique code received from the unregistered device 270. If they match, then registration is successful.
• Embodiments herein describe a registration service as making a registration decision (determining whether or not registration information satisfies the criteria of a registration technique).
• the unregistered device 270 and/or remote control application 250 may make the registration decision.
• unregistered device 270 may provide registration information to remote control application 250, and remote control application 250 may then determine whether the received registration information (potentially in combination with additional registration information that may be received from registration service 202, received from a user or generated by remote control application 250) satisfies criteria of the selected registration technique.
• Remote control application 250 may then notify the registration service that registration is or is not successful, responsive to which device binder 214 may bind the device to the user account if appropriate.
• remote control application 250 may send registration information to unregistered device 270, and the unregistered device may use such registration information to make a registration decision.
• Unregistered device 270 may then notify the registration service 202 of the registration decision.
• processing logic determines whether the first registration data and the second registration data satisfy one or more criteria of a registration technique that is to be used. In one embodiment, processing logic determines whether the first registration data includes a unique code or token that matches a unique code or token in the second registration data. In other embodiments, processing logic may additionally or alternatively determine whether a location of the first device and/or second device satisfy a location criterion, whether the first device and second device are on the same LAN, whether a role of a user account associated with the remote control application has registration permissions, and/or may apply other criteria. If the received registration data satisfies the one or more criteria, then registration is successful and the method continues to block 520. Otherwise, registration fails and the method ends.
• processing device 1302 may be a complex instruction set computing (CISC) microprocessor, reduced instruction set computing (RISC) microprocessor, very long instruction word (VLIW) microprocessor, processor implementing other instruction sets, or processors implementing a combination of instruction sets.
• Processing device 1302 may also be one or more special-purpose processing devices such as an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a digital signal processor (DSP), network processor, or the like.
• ASIC application specific integrated circuit
• FPGA field programmable gate array
• DSP digital signal processor
• Processing device 1302 is configured to execute the processing logic (instructions 1322) for performing the operations and steps discussed herein.
• the processing device of example 37 is further to determine that the embedded system does not presently support the determined registration technique. The processing device is further to update the embedded system to cause the embedded system to support the determined registration technique. In example 39, the processing device of example 37 is further to determine a registration technique selection rule applicable to the embedded system and determine the registration technique from the plurality of registration techniques based on application of the registration technique selection rule. In example 40, the processing device of example 37 is further to receive information from an application running on a mobile device, wherein the application is logged in to a user account. The processing device is further to notify the application of the registration technique. The processing device is further to receive first data from the application and second data from the embedded system.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Theoretical Computer Science (AREA)
• Computer Hardware Design (AREA)
• Software Systems (AREA)
• Physics & Mathematics (AREA)
• General Engineering & Computer Science (AREA)
• General Physics & Mathematics (AREA)
• Telephonic Communication Services (AREA)

Priority Applications (2)

Applications Claiming Priority (6)

Publications (1)

Family

ID=55747087

Family Applications (1)

Country Status (3)

Families Citing this family (1)

Citations (5)

Family Cites Families (5)

• 2015
  • 2015-08-27 WO PCT/US2015/047277 patent/WO2016060740A1/en active Application Filing
  • 2015-08-27 EP EP15851176.6A patent/EP3207452A4/en not_active Withdrawn
  • 2015-08-27 CN CN201580056268.XA patent/CN107077326B/zh not_active Expired - Fee Related

Patent Citations (6)

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events