Method and cloud server for managing device

Patent metadata

Field	Value
Publication number	US-10142310-B2
Application number	US-201514887972-A
Country	US
Kind code	B2
Filing date	Oct 20, 2015
Priority date	Dec 1, 2014
Publication date	Nov 27, 2018
Grant date	Nov 27, 2018

Abstract

A method of managing a device is provided. The method includes registering execution authorization information regarding a function provided by a first device, receiving a request for determining whether a second device that requests execution of a function provided by the cloud server has authorization to perform the function provided by the first device from the first device, authenticating whether the second device has authorization for performing a function provided by the first device, and transmitting a result of the authentication to the first device.

First claim

What is claimed is:

1. A method, performed by a cloud server, of managing a device, the method comprising:
recording information identifying a first device connected to the cloud server through a network;
recording information indicating at least one function provided by the first device;
recording execution authorization information indicating an object capable of performing the at least one function;
receiving from the first device, a request for determining whether a second device that requests execution of the at least one function provided by the first device has authorization to perform the at least one function provided by the first device;
authenticating, based at least in part on the execution authorization information, whether the second device has the authorization to perform the at least one function provided by the first device; and
transmitting a result of the authenticating to the first device,
wherein the cloud server updates the execution authorization information through a device which is an administrator of the first device.

2. The method of claim 1 , wherein, in the receiving of the request, authentication information regarding the second device, which is received by the first device from the second device, is also received by the cloud server.

3. The method of claim 1 , wherein the authenticating comprises:
transmitting, if the second device has no authorization to perform the at least one function provided by the first device, an authorization determination request to the device of the administrator of the first device; and
receiving an authentication determination result from the device of the administrator of the first device.

4. The method of claim 1 , wherein the authenticating comprises determining whether the second device has authorization to perform the at least one function provided by the first device by comparing authentication information regarding the second device included in the request to the execution authorization information.

5. The method of claim 4 , further comprising:
deleting, if it is determined that the second device has authorization to perform the at least one function provided by the first device, information corresponding to the authentication information in the execution authorization information.

6. The method of claim 1 , further comprising:
receiving an input of an administrator of the first device and deleting the execution authorization information.

7. The method of claim 1 , wherein the recording of the execution authorization information regarding the first device comprises:
receiving the execution authorization information and access information regarding the first device;
determining whether to register the execution authorization information based on the access information; and
registering the execution authorization information based on a result of the determination.

8. The method of claim 1 , wherein the execution authorization information includes at least one of device identification information, an authentication key, or service identification information.

9. At least one non-transitory computer-readable recording medium for storing a computer program configured to be readable by at least one processor for instructing the at least one processor to execute a computer process for performing the method of claim 1 .

10. A cloud server comprising:
a memory; and
at least one processor coupled to the memory and configured to:
record information identifying a first device connected to the cloud server through a network,
record information indicating at least one function provided by the first device,
record execution authorization information indicating an object capable of performing the at least one function, and
authenticate, based at least in part on the execution authorization information, whether a second device has authorization to perform the at least one function provided by the first device; and

a communicator configured to:
receive, from the first device, a request for authenticating whether the second device that requests execution of the at least one function provided by the first device has the authorization to perform the at least one function provided by the first device, and
transmit a result of the authenticating to the first device,

wherein the cloud server is implemented as a hardware device, and
wherein the cloud server updates the execution authorization information through a device which is an administrator of the first device.

11. The cloud server of claim 10 , wherein the communicator is further configured to receive authentication information regarding the second device received by the first device from the second device.

12. The cloud server of claim 10 ,
wherein, if the second device has no authorization to perform the at least one function provided by the first device, the at least one processor is further configured to control transmission of an authorization determination request to a device of an administrator of the first device, and
wherein the communicator is further configured to receive an authentication determination result from the device of the administrator of the first device.

13. The cloud server of claim 10 , wherein the at least one processor is further configured to determine whether the second device has authorization to perform the at least one function provided by the first device by comparing authentication information regarding the second device included in the request to the execution authorization information.

14. The cloud server of claim 13 , wherein, if it is determined that the second device has authorization to perform the at least one function provided by the first device, the at least one processor is further configured to delete information corresponding to the authentication information in the execution authorization information.

15. The cloud server of claim 10 , wherein the at least one processor is further configured to:
receive an input of an administrator of the first device, and
delete the execution authorization information.

16. The cloud server of claim 10 , wherein the at least one processor is further configured to:
receive the execution authorization information and access information regarding the first device,
determine whether to register the execution authorization information based on the access information, and
register the execution authorization information based on a result of the determination.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Oh Jung-Hyun

Classifications

• G06F21/445

  by mutual authentication, e.g. between devices or programs · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G07C2209/02

  Access control comprising means for the enrolment of users · CPC title

• G07C2209/08

  With time considerations, e.g. temporary activation, valid time window or time limitations · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title