Authenticating a limited input device via an authenticated application

Patent metadata

Field	Value
Publication number	US-2016099941-A1
Application number	US-201514873162-A
Country	US
Kind code	A1
Filing date	Oct 1, 2015
Priority date	Oct 3, 2014
Publication date	Apr 7, 2016
Grant date	—

Abstract

A limited input device, such as a camera, is authenticated based on a request received from an authenticated application. The application can request an application server to provide the application with a one-time authorization code. The request includes the device identifier associated with the camera. The server stores an association between the one-time authorization code and the device identifier of the camera, and provides the application with the one-time authorization code. The application provides the camera with the one-time authorization code. The camera transmits a request for an access token to the server, the request for the access token including the one-time authorization code and the device identifier associated with the camera. The server verifies the device identifier associated with the camera with that associated with the one-time authorization code, and upon a positive verification authenticates the camera by providing the camera with the access token.

First claim

What is claimed is:

1 . A system comprising:
a limited input device paired with an authenticated application executing on a first device, the limited input device configured to provide the authenticated application with a first device identifier to pair the limited input device with the authenticated application; and a computer program product comprising a computer-readable storage medium having instructions encoded thereon that, when executed by a processor, cause the processor to:
receive a request from the authenticated application for a one-time authorization code, the request comprising the first device identifier,
store an association between the first device identifier and the one-time authorization code,
transmit the one-time authorization code to the authenticated application,
receive a request for an access token from the limited input device, the request comprising the one-time authorization code and a second device identifier;
verify the validity of the one-time authorization code by determining if the second device identifier matches the first device identifier; and
authenticate, responsive to verification of the validity of the one-time authorization code, the limited input device by providing the limited input device with the access token.

2 . The system of claim 1 , wherein the instructions to verify the validity of the one-time authorization code further comprises instructions, that when executed, cause the processor to:
determine if the one-time authorization code is received from the limited input device within a threshold period of time from when the one-time authorization code was provided to the authenticated application.

3 . A method for authenticating a limited input device paired with an authenticated application, the method comprising:
receiving a request from the authenticated application for a one-time authorization code; transmitting, responsive to receiving the request for the one-time authorization code, the one-time authorization code to the authenticated application; receiving a request for an access token from the limited input device, the request comprising the one-time authorization code; verifying the validity of the one-time authorization code; and authenticating, responsive to an affirmative verification, the limited input device by providing the limited input device with the access token.

4 . The method of claim 3 , further comprising:
wherein the request for the one-time authorization code further comprises a first device identifier identifying the limited input device; and wherein the request for the access token further comprises a second device identifier.

5 . The method of claim 4 , wherein verifying the validity of the one-time authorization code comprises:
determining if the first device identifier matches the second device identifier.

6 . The method of claim 3 , wherein verifying the validity of the one-time authorization code comprises:
determining if the one-time authorization code is received from the limited input device within a threshold period of time from providing the one-time authorization code to the authenticated application.

7 . The method of claim 3 , wherein authenticating the limited input device by providing the limited input device with the access token further comprises providing the limited input device with a refresh token.

8 . The method of claim 3 , wherein the request for the one-time authorization code further comprises an authenticated application device identifier identifying the authenticated application and an authenticated application client secret value associated with a second authenticated application device identifier.

9 . The method of claim 8 , further comprising providing the one-time authorization code to the authenticated application responsive to verifying that the authenticated application device identifier in the request for the one-time authorization code matches the second authenticated application device identifier identified by the application client secret value.

10 . The method of claim 3 , wherein the limited input device is a camera.

11 . The method of claim 3 , wherein the access token is associated with a user account of a user of the limited input device and the authenticated application.

12 . The method of claim 11 , further comprising:
receiving, from the limited input device, an authenticated request to link the limited input device to the user account, the request to link the limited input device comprising the access token and device information associated with the limited input device; identifying the user account associated with the access token; and linking the limited input device to the user account by generating an association between the identified user account and the device information associated with the limited input device.

13 . A computer-readable storage medium having instructions encoded thereon that, when executed by a processor, causes the processor to:
receive a request from the authenticated application for a one-time authorization code; transmit, responsive to receiving the request for the one-time authorization code, the one-time authorization code to the authenticated application; receive a request for an access token from the limited input device, the request comprising the one-time authorization code; verify the validity of the one-time authorization code; and authenticate, responsive to an affirmative verification, the limited input device by providing the limited input device with the access token.

14 . The computer readable storage medium of claim 13 ,
wherein the request for the one-time authorization code further comprises a first device identifier identifying the limited input device; and wherein the request for the access token further comprises a second device identifier.

15 . The computer readable storage medium of claim 14 , wherein instructions that cause the processor to verify the validity of the one-time authorization code further comprises instructions that, when executed, cause the processor to:
determine if the first device identifier matches the second device identifier.

16 . The computer readable storage medium of claim 13 , wherein instructions that cause the processor to verify the validity of the one-time authorization code further comprises instructions that, when executed, cause the processor to:
determine if the one-time authorization code is received from the limited input device within a threshold period of time from providing the one-time authorization code to the authenticated application.

17 . The computer readable storage medium of claim 13 , wherein the instructions that, when executed, cause the processor to authenticate the limited input device by providing the limited input device with the access token further comprises instructions that, when executed, cause the processor to provide the limited input device with a refresh token.

18 . The computer readable storage medium of claim 13 , wherein the request for the one-time authorization code further comprises:
an authenticated application device identifier corresponding to an identification of the authenticated application, and an authenticated application client secret value associated with a second authenticated application device identifier.

19 . The computer readable storage medium of claim 18 , further comprising instructions that, when executed, cause the processor to provide the one-time authorization code to the authenticated applicati

Assignees

• Gopro Inc

Inventors

• Hein Christopher

Classifications

• H04N23/661

  Transmitting camera control signals through networks, e.g. control via the Internet · CPC title

• H04N23/66

  Remote control of cameras or camera parts, e.g. by remote control devices · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/0884

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title