Method for communicating with external electronic apparatus and electronic apparatus thereof

Patent metadata

Field	Value
Publication number	US-11570602-B2
Application number	US-202017079749-A
Country	US
Kind code	B2
Filing date	Oct 26, 2020
Priority date	Oct 25, 2019
Publication date	Jan 31, 2023
Grant date	Jan 31, 2023

Abstract

An electronic device and method are disclosed herein. The electronic device includes memory storing a certificate list including first certificate data of the electronic device, and second certificate data of an external electronic device, a short-range wireless communication circuit, and a processor. The processor implements the method, including: detecting a trigger event for requesting establishment a communication connection with a device local to the electronic device, controlling the short-range wireless communication circuit to broadcast an advertisement packet generated based on the first certificate data, in response to detecting the trigger event, receiving a response packet from the external electronic device and acquire a third certificate data from the received response packet, authenticating the external electronic device based on the second certificate data and the third certificate data, and establishing a secure communication channel with the external electronic device if the external electronic device is authenticated.

First claim

What is claimed is:

1. An electronic device, comprising:
a memory;
a short-range wireless communication circuit; and
a processor operatively connected to the memory and the short-range wireless communication circuit, wherein the memory stores instructions that, when executed, cause the processor to:
retrieve, from an external server, a certificate list indicating a list of trusted devices for a single user account, wherein the certificate list is also received by an external electronic device, and includes first certificate data of the electronic device, and second certificate data of the external electronic device,
detect a trigger event for requesting establishment a communication connection with a device local to the electronic device,
control the short-range wireless communication circuit to broadcast an advertisement packet generated based on the first certificate data, in response to detecting the trigger event,
after determining, by the external electronic device, that the first certificate data is indicated in the certificate list, receive a response packet from the external electronic device and acquire a third certificate data from the received response packet,
authenticate the external electronic device based on detecting a match between the second certificate data for the external electronic device indicated in the certificate list and the third certificate data, and
establish a secure communication channel with the external electronic device if the external electronic device is authenticated.

2. The electronic device of claim 1 ,
wherein the instructions, when executed, further cause the processor to:
acquire a first hash value from the first certificate data using a hash function,
wherein the generated advertisement packet includes the first hash value, wherein the third certificate data includes a second hash value, and
wherein authenticating the external electronic device includes comparing the second hash value of the third certificate data with a hash value generated from the second certificate data.

3. The electronic device of claim 1 , further comprising a long-range wireless communication circuit configured to communicate with the external server,
wherein the instructions, when executed, further cause the processor to:
log in to the external server based on the single user account, wherein the external electronic device is also logged into the server via the single user account, and
register a first user identification information stored on the electronic device and the first certificate data in the external server, through the long-range wireless communication circuit, and
wherein the certificate list is generated by the external server based on transmission of user information to the external server by the electronic device and the external electronic device, and is accessed by the electronic device and the external electronic device by log in via the single user account.

4. The electronic device of claim 3 ,
wherein the instructions, when executed, further cause the processor to:
transmit second user identification information stored in the memory to the external server, to which the electronic device is logged in based on the user account, through the long-range wireless communication circuit, and
receive, from the external server, the second certificate data corresponding to the second user identification information, through the long-range wireless communication circuit.

5. The electronic device of claim 4 , wherein the second user identification information includes contact information corresponding to the external electronic device.

6. The electronic device of claim 4 , further comprising a display,
wherein the instructions, when executed, further cause the processor to:
display an item representing the second user identification information, and
in response to receiving a user input selecting the item, transmit content data corresponding to the detected trigger event to the external electronic device through the secure communication channel using the short-range wireless communication circuit.

7. The electronic device of claim 1 , wherein the instructions, when executed, further cause the processor to:
acquire a shared key that is shared with the external electronic device, and
encrypt the first certificate data based on the shared key, wherein the generated advertisement packet includes the encrypted first certificate data.

8. The electronic device of claim 3 ,
wherein the instructions, when executed, further cause the processor to:
download the certificate list from the external server.

9. A method of an electronic device, the method comprising:
retrieving, from an external server, a certificate list indicating a list of trusted devices for a single user account, wherein the certificate list is also received by an external electronic device, and includes first certificate data of the electronic device, and second certificate data of the external electronic device,
detecting a trigger event requesting establishment of a communication connection with another device local to the electronic device;
broadcasting an advertisement packet generated based on the first certificate data, in response to detection of the trigger event;
after determining, by the external electronic device, that the first certificate data is indicated in the certificate list, receiving a response packet from the external electronic device and acquiring third certificate data from the response packet received responsive to the broadcast advertisement packet,
authenticating the external electronic device based on detecting a match between the second certificate data for the external electronic device indicated in the certificate list and the third certificate data; and
establishing a secure communication channel with the external electronic device based on detecting that the external electronic device is authenticated.

10. The method of claim 9 , further comprising:
acquiring a first hash value from the first certificate data using a hash function,
wherein the generated advertisement packet includes the first hash value, wherein the third certificate data includes a second hash value, and
wherein authenticating the external electronic device comprises comparing the second hash value of the third certificate data with a hash value generated from the second certificate data.

11. The method of claim 9 , further comprising:
logging in to the external server based on a single user account, wherein the external electronic device is also logged into the server via the single user account; and
registering a first user identification information stored on the electronic device and the first certificate data in the external server,
wherein the certificate list is generated by the external server based on transmission of user information to the external server by the electronic device and the external electronic device, and is accessed by the electronic device and the external electronic device by log in via the single user account.

12. The method of claim 11 , further comprising:
transmitting second user identification information stored in a memory to the external server; and
receiving, from the external server, the second certificate data corresponding to the second user identification information.

13. The method of claim 12 , wherein the second user identification information includes contact information corresponding to the external electronic device.

14. The method of claim 12 , further comprising:
displaying an item representing the second user identification information;
receivi

Assignees

• Samsung Electronics Co Ltd

Inventors

• Park Chanyeol
• Kang Seungseok
• Song Wonsik
• Cho Jungmin
• Park Chunho
• Ahn Wonick
• Jaygarl Hojun

Classifications

• H04W12/03

  Protecting confidentiality, e.g. by encryption · CPC title

• H04W4/80 Primary

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04W12/069

  using certificates or pre-shared keys · CPC title

• H04W76/14 Primary

  Direct-mode setup · CPC title