System and method for securely connecting network devices using optical labels

Patent metadata

Field	Value
Publication number	US-9894473-B2
Application number	US-201715473423-A
Country	US
Kind code	B2
Filing date	Mar 29, 2017
Priority date	Dec 18, 2014
Publication date	Feb 13, 2018
Grant date	Feb 13, 2018

Abstract

A platform, apparatus and method are described for pairing devices. For example, one embodiment of a system for pairing devices comprises: a first data processing device having a machine-readable optical label associated therewith and including a first wireless communication interface; a second data processing device having a second wireless communication interface and an optical reader for reading identification data from the optical label associated with the first data processing device, the second wireless communication interface including pairing logic to use the identification data to pair with the first data processing device by establishing a secure communication channel between the first and second wireless communication interfaces.

First claim

What is claimed is:

1. A system for establishing a secure communication channel between an Internet of Things (IoT) device and an IoT cloud service comprising:
an Internet of Things (IoT) device having a machine-readable optical label associated therewith and including a first wireless communication interface;
an IoT cloud service to manage user accounts, each user account having one or more IoT devices associated therewith, the IoT cloud service to transmit commands to control the IoT devices and to receive data from the IoT devices related to functions performed by the IoT devices, the IoT cloud service to provide access to the data by a plurality of users, each user associated with at least one of the user accounts; and
an IoT service app to be installed on a mobile user device to cause the mobile user device to establish a secure communication channel with the IoT cloud service and to capture identification data from the optical label associated with the IoT device, the IoT service app to cause the mobile user device to transmit the identification data to the IoT cloud service over the secure communication channel,
the IoT cloud service to use the identification data to determine an encryption key associated with the IoT device or to use the identification data as an encryption key,
the IoT cloud service to then use the encryption key to encrypt commands and data to be sent to the IoT device and/or to decrypt data received from the IoT device.

2. The system as in claim 1 wherein the encryption key comprises a public key of the IoT device, the IoT cloud service to use the public key to encrypt commands and data transmitted to the IoT device,
the IoT device having a private key to decrypt the commands and data received from the IoT cloud service.

3. The system as in claim 1 further comprising:
an IoT hub having a first wireless communication interface to establish a local wireless communication connection with a second wireless communication interface of the IoT device, the IoT hub to connect the IoT device to the IoT cloud service, wherein the encrypted commands and data are to be transmitted through the IoT hub.

4. The system as in claim 3 wherein the IoT hub further comprises a third wireless communication interface to connect with the IoT cloud service over the Internet.

5. The system as in claim 1 wherein the secure communication channel comprises a secure sockets layer (SSL) communication channel.

6. The system as in claim 1 wherein the IoT service or the mobile user device is to share the encryption key with the IoT hub.

7. The system as in claim 4 wherein the first and second wireless communication interfaces comprise Bluetooth Low Energy (BTLE) interfaces and wherein the third wireless communication interface comprises a WiFi interface.

8. A method comprising:
associating a machine-readable optical label with an Internet of Things (IoT);
managing user accounts on an IoT cloud service, each user account having one or more IoT devices associated therewith, the IoT cloud service to transmit commands to control the IoT devices and to receive data from the IoT devices related to functions performed by the IoT devices, the IoT cloud service to provide access to the data by a plurality of users, each user associated with at least one of the user accounts; and
reading identification data from the machine-readable optical label with an IoT service app installed on a mobile user device, the IoT service app to cause the mobile user device to establish a secure communication channel with the IoT cloud service and to transmit the identification data to the IoT cloud service over the secure communication channel;
using the identification data on the IoT cloud service to determine an encryption key associated with the IoT device or to use the identification data as an encryption key; and
using the encryption key on the IoT cloud service to encrypt commands and data to be sent to the IoT device and/or to decrypt data received from the IoT device.

9. The method as in claim 8 wherein the encryption key comprises a public key of the IoT device, the IoT cloud service to use the public key to encrypt commands and data transmitted to the IoT device, the IoT device having a private key to decrypt the commands and data received from the IoT cloud service.

10. The method as in claim 8 further comprising:
establishing communication between the IoT device and IoT cloud service through an IoT hub, the IoT hub having a first wireless communication interface to establish a local wireless communication connection with a second wireless communication interface of the IoT device.

11. The method as in claim 10 wherein the IoT hub further comprises a third wireless communication interface to connect with the IoT cloud service over the Internet.

12. The method as in claim 8 wherein the secure communication channel comprises a secure sockets layer (SSL) communication channel.

13. The method as in claim 8 wherein the IoT service or the mobile user device is to share the encryption key with the IoT hub.

14. The method as in claim 11 wherein the first and second wireless communication interfaces comprise Bluetooth Low Energy (BTLE) interfaces and wherein the third wireless communication interface comprises a WiFi interface.

15. A non-transitory machine-readable medium having program code stored thereon which, when executed by one or more machines causes the one or more machines to perform the operations of:
associating a machine-readable optical label with an Internet of Things (loT) device;
managing user accounts on an IoT cloud service, each user account having one or more IoT devices associated therewith, the IoT cloud service to transmit commands to control the IoT devices and to receive data from the IoT devices related to functions performed by the IoT devices, the IoT cloud service to provide access to the data by a plurality of users, each user associated with at least one of the user accounts; and
reading identification data from the machine-readable optical label with an IoT service app installed on a mobile user device, the IoT service app to cause the mobile user device to establish a secure communication channel with the IoT cloud service and to transmit the identification data to the IoT cloud service over the secure communication channel;
using the identification data on the IoT cloud service to determine an encryption key associated with the IoT device or to use the identification data as an encryption key; and
using the encryption key on the IoT cloud service to encrypt commands and data to be sent to the IoT device and/or to decrypt data received from the IoT device.

16. The machine-readable medium as in claim 15 wherein the encryption key comprises a public key of the IoT device, the IoT cloud service to use the public key to encrypt commands and data transmitted to the IoT device, the IoT device having a private key to decrypt the commands and data received from the IoT cloud service.

17. The machine-readable medium as in 8 further comprising program code to cause the machines to perform the operations of:
establishing communication between the IoT device and IoT cloud service through an IoT hub, the IoT hub having a first wireless communication interface to establish a local wireless communication connection with a second wireless communication interface of the IoT device.

18. The machine-readable medium as in claim 17 wherein the IoT hub further comprises a third wireless communication interface to connect with the IoT cloud service o

Assignees

• Afero Inc

Inventors

• Britt Joe
• Matsumura Shin
• Forood Houman
• Zimmerman Scott
• Myles Phillip
• Zawicki Sean
• Kutami Daisuke
• Holland Shannon
• Lee Justin

Classifications

• H04W4/008 Primary

  Electricity · mapped topic

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L67/306

  User profiles · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title