Securely connecting control device to target device

Patent metadata

Field	Value
Publication number	US-2017318005-A9
Application number	US-201615256217-A
Country	US
Kind code	A9
Filing date	Sep 2, 2016
Priority date	Sep 23, 2013
Publication date	Nov 2, 2017
Grant date	—

Abstract

In an approach, a target computing device receives a pairing request from a controller computing device, the pairing request including controller credentials that were previously received by the controller computing device from an authentication server computer and encrypted under a service key. The target computing device forwards the pairing request to the authentication server, the authentication server computer being configured to return a pairing response based at least in part on the controller credentials. The target computing device receives the pairing which includes a shared secret encrypted under a target device key and the same shared secret encrypted under a controller key. The target computing device decrypts the shared secret encrypted under the target device key and forwards the shared secret encrypted under the controller key to the controller device. Using the decrypted shared secret, the target computing device establishes a secure connection to the controller computing device.

First claim

1 . A method comprising:
using a target computing device, receiving a pairing request from a controller computing device, the pairing request including controller credentials that were previously received by the controller computing device from an authentication server computer and encrypted under a service key that is not available to the controller computing device and the target computing device; using the target computing device, forwarding the pairing request to the authentication server computer, the authentication server computer being configured to return a pairing response based at least in part on the controller credentials; using the target computing device, receiving the pairing response from the authentication server computer, wherein the pairing response includes a shared secret encrypted under a target device key and the same shared secret encrypted under a controller key, the controller key being unavailable to the target computing device and the target device key being unavailable to the controller computing device; using the target computing device, decrypting the shared secret encrypted under the target device key; using the target computing device, forwarding the shared secret encrypted under the controller key to the controller computing device; using the target computing device, establishing a secure connection to the controller computing device using the decrypted shared secret; using the target computing device, receiving, over the secure connection, one or more control messages from the controller computing device that are configured to control one or more functions of the target computing device.

2 . The method of claim 1 , wherein the target computing device is configured to present multimedia content and the method further comprising:
using the target computing device, receiving, over the secure connection, an instruction from a second screen user interface application executing on the controller computing device which causes the target computing device to modify presentation of the multimedia content.

3 . The method of claim 2 , further comprising modifying the presentation of the multimedia content by one or more of: changing volume of the target device, enabling or disabling closed captioning on the multimedia content, beginning playback of the multimedia content, pausing the multimedia content, switching presentation to different multimedia content, changing playback of the multimedia content to resume at a different point in time within the multimedia content, ending playback of the multimedia content, or displaying title recommendations.

4 . The method of claim 2 , further comprising:
the controller computing device determining that a period of time has elapsed without receiving input from a user and in response entering a power saving mode and locking the controller computing device to prevent user access to one or more functions of the controller computing device; in response to exiting the power saving mode, the controller computing device displaying a user interface that allows the user to unlock the controller computing device, wherein the user interface includes one or more options that, when selected, cause the target computing device to modify presentation of the multimedia content.

5 . The method of claim 2 , further comprising:
using the controller computing device, determining that the target computing device has finished playback of the multimedia content and in response displaying one or more titles; using the controller computing device, in response to receiving user input specifying selection of a particular title of the one or more titles, sending a message to the target computing device over the secure connection that causes the target computing device to begin presentation of the particular title.

6 . (canceled)

7 . The method of claim 1 , wherein the controller computing device and the target computing device are communicatively coupled by a local area network.

8 . The method of claim 1 , wherein the controller computing device is any of a smartphone, a tablet computer, or a wearable computing device.

9 . The method of claim 1 , wherein the target computing device is one or more of: a television, a projector, a game console, a set-top-box, or a disc player.

10 . The method of claim 1 , wherein the pairing response includes target device credentials for the target computing device that are encrypted under the service key.

11 . A non-transitory computer-readable medium storing one or more instructions, which when executed by one or more processors, cause the one or more processors to perform steps comprising:
using a target computing device, receiving a pairing request from a controller computing device, the pairing request including controller credentials that were previously received by the controller computing device from an authentication server computer and encrypted under a service key that is not available to the controller computing device and the target computing device; using the target computing device, forwarding the pairing request to the authentication server computer, the authentication server computer being configured to return a pairing response based at least in part on the controller credentials; using the target computing device, receiving the pairing response from the authentication server computer, wherein the pairing response includes a shared secret encrypted under a target device key and the same shared secret encrypted under a controller key, the controller key being unavailable to the target computing device and the target device key being unavailable to the controller computing device; using the target computing device, decrypting the shared secret encrypted under the target device key; using the target computing device, forwarding the shared secret encrypted under the controller key to the controller computing device; using the target computing device, establishing a secure connection to the controller computing device using the decrypted shared secret; using the target computing device, receiving, over the secure connection, one or more control messages from the controller computing device that are configured to control one or more functions of the target computing device.

12 . The non-transitory computer-readable medium of claim 11 , wherein the target computing device is configured to present multimedia content and the steps further comprise:
using the target computing device, receiving, over the secure connection, an instruction from a second screen user interface application executing on the controller computing device which causes the target computing device to modify presentation of the multimedia content.

13 . The non-transitory computer-readable medium of claim 12 , wherein the steps further comprise modifying the presentation of the multimedia content by one or more of: changing volume of the target device, enabling or disabling closed captioning on the multimedia content, beginning playback of the multimedia content, pausing the multimedia content, switching presentation to different multimedia content, changing playback of the multimedia content to resume at a different point in time within the multimedia content, ending playback of the multimedia content, or displaying title recommendations.

14 . The non-transitory computer-readable medium of claim 12 , wherein the steps further comprise:
the controller computing device determining that a period of time has elapsed without receiving input from a user and in response entering a power saving mode and locking the controller computing device to prevent user access to one or

Assignees

• Netflix Inc

Inventors

• White Jean-Marie
• Odayarkoil Baskar
• Adams Lee

Classifications

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• H04N21/47202

  for requesting content on demand, e.g. video on demand · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04N21/25816

  involving client authentication (restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06) · CPC title

• H04L9/3249

  using RSA or related signature schemes, e.g. Rabin scheme · CPC title