Apparatus, system and method for associating a device to a user of a service

Patent metadata

Field	Value
Publication number	US-11889314-B2
Application number	US-201816980974-A
Country	US
Kind code	B2
Filing date	Apr 12, 2018
Priority date	Mar 16, 2018
Publication date	Jan 30, 2024
Grant date	Jan 30, 2024

Abstract

A system for associating a device to a user of a service hosted at a remote location may include a device, a WAN, and equipment. The user may identify a wireless network of the device and connect to the device using equipment. An application on the equipment may generate a key and send the key to the device. The device may then connect with the service and transmit the key to the service. The application may disconnect from the device and connect with the service. The application may send a request to the service to associate with the device, sending the key with the request. The service compares the keys received from the device and the application. If the respective keys match, then the service may associate the device to the user of the service. Otherwise, the association is denied.

First claim

What is claimed is:

1. A method for associating a device to a user of a service hosted at a remote location, the method comprising:
establishing a direct network connection between the device and a user computing device;
requesting a security certificate from the device via the direct network connection;
receiving the security certificate from the device, wherein the security certificate comprises a public encryption key;
generating a device key on the user computing device by an application running on the user computing device;
creating a message, by the user computing device, wherein the message comprises the device key and connection information, wherein the connection information comprises information to connect to a local network and information for the device to connect to the service;
encrypting, by the user computing device, the message with the public encryption key to create an encrypted message;
sending the encrypted message to the device wherein the device provides the device key to the service;
connecting with the local network after disconnecting the direct network connection;
connecting, by the application, with the service on a remote network via a gateway connected to the local network;
sending a request to the service to associate with the device, and wherein the request includes the device key to establish a network connection between the user computing device and the service, wherein the service is associated with the device in response to the request if the device key provided by the user computing device matches the device key provided by the devic e . and
performing a time-out procedure if an acknowledgement is not received from the service.

2. The method of claim 1 further comprising placing the device into an enrollment mode.

3. The method of claim 1 , wherein generating the device key on the user computing device comprises randomly generating an alphanumeric string, wherein the device key comprises the alphanumeric string.

4. The method of claim 3 further comprising:
requesting, from the device, the public encryption key;
wherein the device decrypts the message using a private encryption key.

5. The method of claim 1 , wherein the service is an Internet-based service.

6. A method for associating a device to a user of a service hosted at a remote location, the method for the device comprising:
connecting to a user computing device via a direct network connection;
receiving a request for a security certificate from the user computing device;
sending a security certificate to the user computing device, the security certificate comprising a public encryption key;
receiving an encrypted message from the user computing device, wherein the message includes a device key generated on the user computing device by an application running on the user computing device and connection information, wherein the connection information comprises information to connect to a local network and information required for the device to connect to the service;
decrypting the encrypted message with a private encryption key to determine the device key and the connection information;
shutting down a wireless network and a device-based service after receipt of the encrypted message;
establishing a connection with the local network based on the information to connect to the local network;
establishing a network connection to the service via the local network;
providing the device key to the service;
wherein the device is associated with the user computing device in response to a determination by the service that the device key provided by the device to the service via the network connection matches a user computing device key that the service receives from the user computing device; and
performing a time-out procedure if an acknowledgement is not received from the service.

7. The method of claim 6 further comprising opening the device-based service, wherein the device-based service is a web server that is configured to process the message from the user.

8. A device associated to a user of a service hosted at a remote location, the device comprising:
a wiring device; and
a wireless access point, wherein the wireless access point comprises a device-based service to:
start a peer-to-peer network;
advertise the peer-to-peer network;
establish a first communication link to make a direct network connection to a user computing device;
receive a request for a security certificate from the user computing device;
send a security certificate to the user computing device, the security certificate comprising a public encryption key;
receive an encrypted message from the user computing device, wherein the encrypted message includes a user computing device key generated on the user computing device by an application running on the user computing device and connection information, wherein the connection information comprises information to connect to a local network and information required for the device to connect to the service;
decrypt the encrypted message with a private encryption key to determine the user computing device key and the information required for the device to connect to the service;
shut down the peer-to-peer network after receipt of the encrypted message;
establish a connection with the local network based on the information to connect to the local network;
establish a second communication link to connect to the service, wherein the device provides a device key generated on the user computing device to the service via the second communication link;
wherein the device is associated with the user computing device in response to a determination by the service that the device key provided by the device to the service via the second communication link matches the user computing device key that the service receives from the user computing device; and
performing a time-out procedure if an acknowledgement is not received from the service.

9. The device of claim 8 , wherein the message further includes information required for the device to connect to the service and wherein the device is one of a load control device, a switch, a dimmer, a fan, a receptacle, a ground fault circuit interrupter, an arc fault circuit interrupter, ground fault protection equipment, a home automation device, a smart home device, an “Internet of Things” device, an audio/video device, a security device, an occupancy sensor, a surge protective device, a Universal Serial Bus device, a circuit breaker, a circuit breaker controller, and a circuit breaker aggregator.

10. The device of claim 8 , wherein the device is placed into an enrollment mode, and
wherein the device advertises an identification of the peer-to-peer network so the user computing device can join the peer-to-peer network of the device.

11. The device of claim 8 , wherein the device further comprises a web server that is configured to start up on the peer-to-peer network and to process the message from the user computing device.

12. The device of claim 11 , wherein a device-based service shuts down when the peer-to-peer network is disconnected.

13. The device of claim 8 further comprising a public encryption key of the device, wherein the device sends the public encryption key to the user computing device to receive the encrypted message.

Assignees

• Leviton Manufacturing Co

Inventors

• Yokum Brian A
• Ard Aaron
• Buster Mark

Classifications

• H04W12/50 Primary

  Secure pairing of devices · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04W12/041

  Key generation or derivation · CPC title

• H04W12/069

  using certificates or pre-shared keys · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title