Authenticating a limited input device via an authenticated application

Patent metadata

Field	Value
Publication number	US-11329984-B2
Application number	US-201916512512-A
Country	US
Kind code	B2
Filing date	Jul 16, 2019
Priority date	Oct 3, 2014
Publication date	May 10, 2022
Grant date	May 10, 2022

Abstract

A limited input device, such as a camera, is authenticated based on a request received from an authenticated application. The application can request an application server to provide the application with a one-time authorization code. The request includes the device identifier associated with the camera. The server stores an association between the one-time authorization code and the device identifier of the camera, and provides the application with the one-time authorization code. The application provides the camera with the one-time authorization code. The camera transmits a request for an access token to the server, the request for the access token including the one-time authorization code and the device identifier associated with the camera. The server verifies the device identifier associated with the camera with that associated with the one-time authorization code, and upon a positive verification authenticates the camera by providing the camera with the access token.

First claim

What is claimed is:

1. A system, comprising:
an application executing on a first device;
a camera paired with the application using a first device identifier, the application configured to enable a user to control one or more camera functions of the camera by interacting with the application; and
a computer program product comprising a non-transitory computer-readable storage medium having instructions encoded thereon that, when executed by a processor, causes the processor to:
transmit an authorization code to the application,
responsive to a request for an access token from the camera, verify the authorization code to authenticate the camera,
determine whether a first private key associated with the application and the first device identifier matches a second private key associated with the first device identifier;
associate the access token with a user account based on a determination that the first private key matches the second private key, and
receive one or more images associated with the user account from the camera.

2. The system of claim 1 , wherein the instructions, when executed by the processor, further causes the processor to:
in response to a determination that the access token has expired, receive a refresh token from the camera and provide a new access token to the camera.

3. The system of claim 1 , wherein the computer program product is a server device.

4. The system of claim 1 , wherein to authenticate the camera by verifying the authorization code further comprises to:
receive a request for the authorization code from the application, the request including the first device identifier;
receive a request for the access token from the camera, the request including the authorization code and a second device identifier;
determine that the second device identifier matches the first device identifier; and
provide the camera with the access token.

5. The system of claim 1 , wherein the authorization code is a one-time authorization code.

6. The system of claim 1 , wherein the application is associated with the user account that is maintained by the computer program product.

7. The system of claim 1 , wherein the instructions, when executed by the processor, further causes the processor to:
determine that the access token is valid; and
identify the user account associated with the access token and store the one or more images in a portion of a memory associated with the user account.

8. The system of claim 1 , wherein the instructions, when executed by the processor, further causes the processor to:
determine if the authorization code is received from the camera within a threshold time period from when the authorization code was provided to the application.

9. A method, comprising:
executing an application on a first device to control a camera, wherein the application is paired with the camera using a first device identifier;
transmitting an authorization code to the application paired with the camera;
in response to receiving a request for an access token from the camera, verifying the authorization code;
determining whether a first private key associated with the application and the first device identifier matches a second private key associated with the first device identifier;
associating the access token with a user account based on a determination that the first private key matches the second private key; and
receiving one or more images associated with the user account from the camera.

10. The method of claim 9 , further comprising:
in response to determining that the access token has expired, receiving a refresh token from the camera and providing a new access token to the camera.

11. The method of claim 9 , wherein authenticating the camera by verifying the authorization code further comprises:
receiving a request for the authorization code from the application, the request including the first device identifier;
receiving a request for the access token from the camera, the request including the authorization code and a second device identifier;
determining that the second device identifier matches the first device identifier; and
providing the camera with the access token.

12. The method of claim 9 , wherein the authorization code is a one-time authorization code.

13. The method of claim 9 , further comprising:
associating the application with the user account.

14. The method of claim 9 , further comprising:
determining that the access token is valid; and
identifying the user account associated with the access token and storing the one or more images in a portion of a memory associated with the user account.

15. The method of claim 9 , further comprising:
determining if the authorization code is received from the camera within a threshold time period from when the authorization code was provided to the application.

16. A non-transitory computer-readable storage medium having instructions encoded thereon that, when executed by a processor of a server, causes the server to:
execute an application on a first device to control a camera, wherein the application is paired with the camera using a first device identifier;
transmit an authorization code to the application;
responsive to a request for an access token from the camera, verify the authorization code to authenticate the camera;
determine whether a first private key associated with the application and a first device identifier matches a second private key associated with the first device identifier;
associate the access token with a user account based on a determination that the first private key matches the second private key; and
receive one or more images associated with the user account from the camera.

17. The non-transitory computer-readable storage medium of claim 16 , wherein the instructions, when executed by the processor, further causes the server to:
in response to a determination that the access token has expired, receive a refresh token from the camera and providing a new access token to the camera.

18. The non-transitory computer-readable storage medium of claim 16 , wherein to authenticate the camera by verifying the authorization code further comprises to:
receive a request for the authorization code from the application, the request including the first device identifier;
receive a request for the access token from the camera, the request including the authorization code and a second device identifier;
determine that the second device identifier matches the first device identifier; and
provide the camera with the access token.

19. The non-transitory computer-readable storage medium of claim 16 , wherein the instructions, when executed by the processor, further causes the server to:
determine that the access token is valid; and
identify the user account associated with the access token and store the one or more images in a portion of a memory associated with the user account.

20. The non-transitory computer-readable storage medium of claim 16 , wherein the instructions, when executed by the processor, further causes the server to:
determine if the authorization code is received from the camera within a threshold time period from when the authorization code was provided to the application.

Assignees

• Gopro Inc

Inventors

• Hein Christopher

Classifications

• H04N23/66

  Remote control of cameras or camera parts, e.g. by remote control devices · CPC title

• H04N23/661

  Transmitting camera control signals through networks, e.g. control via the Internet · CPC title

• H04L63/0838

  using one-time-passwords · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title