Techniques for device discovery and configuration

Patent metadata

Field	Value
Publication number	US-10798545-B2
Application number	US-201715448527-A
Country	US
Kind code	B2
Filing date	Mar 2, 2017
Priority date	Mar 2, 2017
Publication date	Oct 6, 2020
Grant date	Oct 6, 2020

Abstract

Systems and methods are provided herein for configuring a device. In some embodiments, a device identifier associated with a target device is received from a service provider computer. A connection request comprising the device identifier is received. In response to receiving the connection request, the target device is configured to connect to a network access point. A request for configuration information associated with the target device may be requested. In some examples, the configuration information comprises authentication information associated with a user account. In response to receiving the configuration information, the configuration information may be transmitted to the target device. The transmission of the configuration information may cause the target device to be configured to exchange data with the service provider computer.

First claim

What is claimed is:

1. A computer-implemented method for automatically discovering and configuring target user devices, comprising:
receiving, by an intermediary user device from a target user device, a connection request comprising a first device identifier of the target user device and a second device identifier of an additional user device that has been detected by the target user device utilizing a short-range wireless communications protocol;
transmitting, by the intermediary user device to a service provider computer, a verification request comprising the first device identifier of the target user device and the second device identifier of the additional user device detected by the target user device,
the service provider computer verifying the target user device based at least on determining i) that the first device identifier of the target user device is associated with a user account managed by the service provider computer ii) that the second device identifier of the additional user device detected by the target user device matches one or more user device identifiers associated with the user account, iii) that a threshold number of additional user devices have been detected, and iv) that a confidence value is greater than a threshold confidence value indicating that the target user device is an expected device operating at an expected location, the confidence value being calculated based on at least two of: comparing a current location of the target user device to one or more locations associated with the user account, a MAC ID of the target user device, and the second device identifier;
when verification is achieved:
receiving, by the intermediary user device from the service provider computer, configuration information for the target user device, the configuration information comprising first authentication information associated with a network access point and second authentication information associated with the user account;
transmitting, by the intermediary user device to the target user device, the configuration information, the target user device storing the configuration information in local memory, the target user device executing instructions to connect to the network access point utilizing the first authentication information,
the target user device connecting to a server computer utilizing the second authentication information.

2. The computer-implemented method of claim 1 , wherein the service provider computer transmits the configuration information to the intermediary user device when the second device identifier is associated with the user account.

3. The computer-implemented method of claim 1 , wherein the second authentication information is transmitted in response to determining that the target user device is connected to the network access point.

4. An intermediary user device, comprising:
a memory configured to store computer-executable instructions for automatically discovering and configuring target user devices; and
a processor configured to access the memory and execute the computer-executable instructions to cause intermediary user device to at least:
receive, from a target user device, a connection request comprising a first device identifier for the target user device and a second device identifier, the second device identifier corresponding to an additional user device detected by the target user device utilizing a short-range wireless communications protocol;
transmit, to a service provider computer, a verification request comprising the first device identifier of the target user device and the second device identifier of the additional user device detected by the target user device,
wherein the service provider computer verifies the target user device based at least on determining i) that the first device identifier of the target user device is associated with a user account managed by the service provider computer ii) that the second device identifier of the additional user device detected by the target user device matches one or more user device identifiers associated with the user account, iii) that a threshold number of additional user devices have been detected, and iv) that a confidence value is greater than a threshold confidence value indicating that the target user device is an expected device operating at an expected location, the confidence value being calculated based on at least two of: comparing a current location of the target user device to one or more locations associated with the user account, a MAC ID of the target user device, and the second device identifier; and
when verification is achieved:
receive, by the intermediary user device from the service provider computer, configuration information for the target user device, the configuration information comprising first authentication information associated with a network access point and second authentication information associated with the user account; and

transmit the configuration information to the target user device,
the target user device storing the configuration information in local memory,
the target user device executing instructions to connect to the network access point utilizing the first authentication information,
the target user device connecting to a server computer utilizing the second authentication information.

5. The intermediary user device of claim 4 , wherein one or more software applications are installed on the target user device based at least in part on transmitting the configuration information.

6. The intermediary user device of claim 4 , wherein the computer-executable instructions further cause the intermediary user device to at least:
provide a network access point identifier to the target user device, wherein the target user device, in response to receiving the network access point identifier, compares the network access point identifier with a network identifier stored in local memory of the target user device, wherein the target user device transmits the first authentication information to the network access point when the network access point identifier matches the network identifier.

7. The intermediary user device of claim 4 , wherein the computer-executable instructions further cause the intermediary user device to at least transmit a first network identifier associated with the network access point to the target user device, the target user device storing a second network identifier, wherein the target user device determines that the first network identifier is equal to the second network identifier prior to transmitting the connection request.

8. The intermediary user device of claim 4 , wherein the computer-executable instructions further cause the intermediary user device to at least:
present a first verification code on a device other than the target user device;
receive a second verification code from the target user device; and
verify that the first verification code matches the second verification code.

9. A non-transitory computer-readable medium having stored thereon computer-executable instructions for automatically discovering and configuring target user devices that, when executed by at least one processor of an intermediary user device, cause the intermediary user device to:
receive, from a target user device, a connection request comprising a first device identifier of the target user device and a second device identifier corresponding to an additional user device detected by the target user device utilizing a short-range wireless communications protocol;
transmit, to a service provider computer, a verification request comprising at least the first device identifier of the target user device and the second device identifier of the additional user device d

Assignees

• Amazon Tech Inc

Inventors

• Canavor Darren Ernest
• Mantha Srikanth

Classifications

• H04W12/06 Primary

  Authentication · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W12/08

  Access security · CPC title