Authenticating a limited input device via an authenticated application

Patent metadata

Field	Value
Publication number	US-10397222-B2
Application number	US-201815906184-A
Country	US
Kind code	B2
Filing date	Feb 27, 2018
Priority date	Oct 3, 2014
Publication date	Aug 27, 2019
Grant date	Aug 27, 2019

Abstract

A limited input device, such as a camera, is authenticated based on a request received from an authenticated application. The application can request an application server to provide the application with a one-time authorization code. The request includes the device identifier associated with the camera. The server stores an association between the one-time authorization code and the device identifier of the camera, and provides the application with the one-time authorization code. The application provides the camera with the one-time authorization code. The camera transmits a request for an access token to the server, the request for the access token including the one-time authorization code and the device identifier associated with the camera. The server verifies the device identifier associated with the camera with that associated with the one-time authorization code, and upon a positive verification authenticates the camera by providing the camera with the access token.

First claim

What is claimed is:

1. A system, comprising:
an authenticated application executing on a first device;
a camera paired with the authenticated application using a first device identifier, the authenticated application configured to enable a user to control one or more camera functions of the camera by interacting with the authenticated application; and
a computer program product comprising a non-transitory computer-readable storage medium having instructions encoded thereon that, when executed by a processor, causes the processor to:
in response to receiving a request including the first device identifier from the authenticated application for a one-time authorization code, transmit the one-time authorization code to the authenticated application,
receive a request for an access token from the camera, the request including the one-time authorization code and a second device identifier,
in response to verifying the one-time authorization code by determining that the second device identifier matches the first device identifier, authenticate the camera by providing the camera with the access token,
associate the access token with a user account,
receive one or more images associated with the user account from the camera, and
in response to determining that the access token has expired, receive a refresh token from the camera and provide a new access token to the camera.

2. The system of claim 1 , wherein the computer program product is a server device.

3. The system of claim 1 , wherein the authenticated application is associated with the user account that is maintained by the computer program product.

4. The system of claim 1 , wherein the instructions, when executed by the processor, further causes the processor to:
in response to determining that the received access token is valid, identify the user account associated with the received access token and store the one or more images in a portion of a memory associated with the user account.

5. The system of claim 1 , wherein the instructions to verify the one-time authorization code further comprises instructions that, when executed by the processor, further causes the processor to:
determine if the one-time authorization code is received from the camera within a threshold time period from when the one-time authorization code was provided to the authenticated application.

6. A method, comprising:
pairing a camera with an authenticated application using a first device identifier, the authenticated application executing on a first device and configured to enable a user to control one or more camera functions of the camera by interacting with the authenticated application;
in response to receiving a request including the first device identifier from the authenticated application for a one-time authorization code, transmitting the one-time authorization code to the authenticated application,
receiving a request for an access token from the camera, the request including the one-time authorization code and a second device identifier,
in response to verifying the one-time authorization code by determining that the second device identifier matches the first device identifier, authenticating the camera by providing the camera with the access token,
associating the access token with a user account,
receiving one or more images associated with the user account from the camera, and
in response to determining that the access token has expired, receiving a refresh token from the camera and provide a new access token to the camera.

7. The method of claim 6 , further comprising:
associating the authenticated application with a user account.

8. The method of claim 6 , further comprising:
in response to determining that the received access token is valid, identifying the user account associated with the received access token and storing the one or more images in a portion of a memory associated with the user account.

9. The method of claim 6 , wherein verifying the one-time authorization code further comprises:
determining if the one-time authorization code is received from the camera within a threshold time period from when the one-time authorization code was provided to the authenticated application.

10. A non-transitory computer-readable storage medium having instructions encoded thereon that, when executed by a processor of a server, causes the server to:
pair a limited input device with an authenticated application using an access token, the authenticated application executing on a first device and configured to enable a user to control one or more camera functions of the limited input device by interacting with the authenticated application;
in response to receiving a request including the first device identifier from the authenticated application for a one-time authorization code, transmit the one-time authorization code to the authenticated application,
receive a request for an access token from the limited input device, the request including the one-time authorization code and a second device identifier,
in response to verifying the one-time authorization code by determining that the second device identifier matches the first device identifier, authenticate the limited input device by providing the limited input device with the access token,
associate the access token with a user account,
receive one or more images associated with the user account from the limited input device, and
in response to determining that the access token has expired, receive a refresh token from the limited input device and provide a new access token to the limited input device.

11. The non-transitory computer-readable storage medium of claim 10 , wherein the instructions, when executed by the processor, further causes the server to:
in response to determining that the received access token is valid, identify the user account associated with the received access token and store the one or more images in a portion of a memory associated with the user account.

Assignees

• Gopro Inc

Inventors

• Hein Christopher

Classifications

• H04N23/661

  Transmitting camera control signals through networks, e.g. control via the Internet · CPC title

• H04N23/66

  Remote control of cameras or camera parts, e.g. by remote control devices · CPC title

• H04L67/125

  involving control of end-device applications over a network · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title