Method for associating an image-forming device, a mobile device, and a user

Patent metadata

Field	Value
Publication number	US-9240982-B2
Application number	US-201314142442-A
Country	US
Kind code	B2
Filing date	Dec 27, 2013
Priority date	Dec 27, 2013
Publication date	Jan 19, 2016
Grant date	Jan 19, 2016

Abstract

Systems, methods, and devices for associating an image forming device and a mobile device receive, at a first device, a request to establish a connection with a second device; generating an optically-readable code that encodes a first set of data, wherein the first set of data includes first key-derivation data; display the optically-readable code of the first set of data; establish a communication channel with the second device; receiving a second set of data from the second device via the established communication channel, wherein the second set of data includes second key-derivation data, and wherein the second key-derivation data is generated in response to receiving the first key-derivation data at the second device; and determine the common key from the first key-derivation data and the second key-derivation data.

First claim

What is claimed is:

1. A method for associating devices, the method comprising:
receiving, at a first device, user-identification information;
determining whether the user-identification information is associated with a common key;
in response to determining that the user-identification information is not associated with the common key, generating an optically-readable code that encodes a first set of data, wherein the first set of data includes at least first key-derivation data, a network address of the first device, and session-identification information;
displaying the optically-readable code of the first set of data;
establishing a connection with a second device;
receiving a second set of data from the second device via the established connection, wherein the second set of data includes at least second key-derivation data, and wherein the second key-derivation data is generated in response to receiving the first key-derivation data at the second device;
determining the common key from the first key-derivation data and the second key-derivation data;
encrypting, at the first device, secure-connection establishing data using the common key;
sending the secure-connection establishing data from the first device to the second device via the established connection;
decrypting, at the second device, the secure-connection establishing data using the common key; and
establishing a secure connection using the decrypted secure-connection establishing data.

2. The method of claim 1 , further comprising:
establishing an association between the user-identification information and the common key; and
storing the association at the first device.

3. The method of claim 1 , further comprising providing an indication for indicating that the connection between the first device and the second device has been established.

4. The method of claim 1 , wherein the secure-connection establishing data includes a common name and a certificate hash.

5. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more computing devices, cause the one or more computing devices to perform operations comprising:
receiving, at a first device, user-identification information;
determining whether the user-identification information is associated with a common key;
in response to determining that the user-identification information is not associated with the common key, generating an optically-readable code that encodes a first set of data, wherein the first set of data includes at least first key-derivation data, a network address of the first device, and session-identification information;
displaying the optically-readable code of the first set of data;
establishing a connection with a second device;
receiving a second set of data from the second device via the established connection, wherein the second set of data includes at least second key-derivation data, and wherein the second key-derivation data is generated in response to receiving the first key-derivation data at the second device;
determining the common key from the first key-derivation data and the second key-derivation data;
encrypting, at the first device, secure-connection establishing data using the common key;
sending the secure-connection establishing data from the first device to the second device via the established connection;
decrypting, at the second device, the secure-connection establishing data using the common key; and
establishing a secure connection using the decrypted secure-connection establishing data.

6. The one or more non-transitory computer-readable media of claim 5 , further comprising:
establishing an association between the user-identification information and the common key; and
storing the association at the first device.

7. The one or more non-transitory computer-readable media of claim 5 , further comprising providing an indication for indicating that the connection between the first device and the second device has been established.

8. The one or more non-transitory computer-readable media of claim 5 , wherein the secure-connection establishing data includes a common name and a certificate hash.

9. A system for associating devices, the system comprising:
a receiver for receiving user-identification information;
at least one non-transitory computer-readable medium; and
at least one processor in communication with the at least one non-transitory computer-readable medium, the at least one processor configured to:
determine whether the user-identification information is associated with a common key;
generate, in response to the determining that the user-identification information is not associated with a common key, an optically-readable code that encodes a first set of data, wherein the first set of data includes at least first key-derivation data, a network address of the first device, and session-identification information;
display the optically-readable code of the first set of data;
establish a connection with a second device;
receive a second set of data from the second device via an established connection, wherein the second set of data includes at least second key-derivation data, and wherein the second key-derivation data is generated in response to receiving a first key-derivation data at the second device;
derive the common key from the first key-derivation data and the second key-derivation data;
encrypt, at the first device, secure-connection establishing data using the common key;
send the secure-connection establishing data from the first device to the second device via the established connection;
decrypt, at the second device, the secure-connection establishing data using the common key; and
establish a secure connection using the decrypted secure-connection establishing data.

Assignees

• Canon Information & Imaging Solutions Inc
• Canon Usa Inc

Inventors

• Slick Royce E
• Ferreira Manuel
• Mazzagatte Craig

Classifications

• H04W12/06

  Authentication · CPC title

• H04L63/061 Primary

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title