Network-assisted fabric pairing

• US 10,104,132 B2
• Filed: 12/30/2014
• Issued: 10/16/2018
• Est. Priority Date: 10/08/2014
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Logue, Jay D., Stebbins, Andrew William, Tinkoff, Roger Loren
• Primary Examiner(s): Tran, Ellen
• Application Number:
  US14/585,827
• Publication Number:
  US 20170048280A1
• Time in Patent Office: 1,386 Days
• CPC Class Codes: H04L 12/2818 from a device located outside both the home and the home network access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Systems and methods for joining a device to a fabric using an assisting device include an indication to add a joining device to a fabric. If the joining device supports network-assisted fabric pairing, a first connection is established between a commissioning device and the assisting device. The assisting device also connects to a joining device. Through the assisting device, the commissioning device and the joining device establish a communication channel over which fabric credentials may be sent.

Claims

1. A method for joining a device to a fabric, comprising:

connecting to an assisting device through an unsecure port in a first local area network, wherein the assisting device resides on the fabric and is configured to assist the device in joining the fabric;

connecting, via an access point of a second local area network, to a commissioning device through the connection to the assisting device, wherein the assisting device connects to the commissioning device through the second local area network, and wherein the commissioning device is configured to manage access to the fabric;

receiving fabric credentials for the fabric via the connection to the commissioning device;

based on the receiving the fabric network credentials, activating a failsafe flag that is configured to block the device from storing the fabric network credentials or network information for fabrics or networks to which the device is unable to connect or complete a successful connectivity test; and

joining the fabric using the received fabric credentials.

2. The method of claim 1, comprising:

obtaining first local area network credentials for the first local area network from the commissioning device via the assisting device; and

joining the first local area network using the first local area network credentials received from the commissioning device.

3. The method of claim 2, comprising:

obtaining second local area network credentials for the second local area network from the commissioning device via the assisting device; and

joining the second local area network using the second local area network credentials received from the commissioning device.

4. The method of claim 3, comprising:

initiating a connectivity test for the second local area network by;

performing a domain name system (DNS) lookup; and

establishing a transmission control protocol (TCP) connection to a test server via a gateway for the second local area network, wherein the second local area network type comprises an 802.11 network type.

5. The method of claim 4, wherein if the initiated connectivity test is unsuccessful by failing to successfully complete a DNS lookup or failing to establish a TCP connection to the test server:

re-initiating the connectivity test;

or

requesting new credentials for the second local area network from the commissioning device or the assisting device.

6. The method of claim 1, comprising:

receiving, from the commissioning device, fabric service configuration information, wherein the fabric service configuration information contains information with which devices in the fabric connect to a remote service; and

connecting to the remote service using the fabric service configuration information after connecting to the fabric.

7. The method of claim 1, comprising:

authenticating identity of the device by sending a device identifier to the commissioning device for the device with which the device verifies identity upon connection to the commissioning device; and

establishing a secure communication with the commissioning device through a secure tunnel through the assisting device using the device identifier.

8. The method of claim 1, comprising receiving an awaken command before connecting to the assisting device or connecting to the commissioning device, wherein the awaken command comprises:

an electronic command from the commissioning device, the assisting device, or a remote service;

or

actuation of a button on the device.

9. An electronic device comprising:

a network interface;

memory;

a processor configured to cause the electronic device to;

connect to an assisting device through an unsecure port in a first local area network via the network interface, wherein the assisting device resides on a fabric network and is configured to assist the electronic device in joining the fabric network;

connect, via an access point of a second local area network, to a commissioning device through the connection to the assisting device, wherein the assisting device connects to the commissioning device through the second local area network, and wherein the commissioning device is configured to manage access to the fabric network;

receive fabric credentials for the fabric network via the connection to the commissioning device;

upon receipt of the fabric network credentials, activate a failsafe flag that is configured to block the electronic device from storing the fabric network credentials or network information for fabrics or networks to which the electronic device is unable to connect or complete a successful connectivity test; and

join the fabric network using the received fabric credentials.

10. The electronic device of claim 9, wherein the processor is configured to cause the electronic device to:

obtain first local area network credentials for the first local area network from the commissioning device via the assisting device;

join the first local area network using the first local area network credentials received from the commissioning device;

obtain second local area network credentials for the second local area network from the commissioning device via the assisting device; and

join the second local area network using the second local area network credentials received from the commissioning device.

11. The electronic device of claim 10, wherein the processor is configured to cause the electronic device to securely reconnect to the commissioning device directly via the second local area network or indirectly through the assisting device via a combination of the first local area network and the second local area network using the second local area network credentials or the first local area network credentials.

12. The electronic device of claim 9, wherein the processor is configured to cause the electronic device to:

determine if the failsafe flag has remained active for a pre-determined period of time after the failsafe flag has been activated; and

if the failsafe flag has remained active for the pre-determined period of time, delete any received fabric or network configuration details.

13. The electronic device of claim 12, wherein the processor is configured to cause the electronic device to reset the failsafe flag if the processor determines that the electronic device has successfully connected to the fabric, the first local area network, or the second local area network to successfully complete a connectivity test.

14. The electronic device of claim 9, wherein the processor is configured to cause the electronic device to:

determine if the electronic device is unable to connect to the fabric, the first local area network, or the second local area network to successfully complete a connectivity test; and

if the connectivity test fails to verify a connection to the commissioning device or a test server through the fabric, the first local area network, or the second local area network, delete any received fabric or network configuration details.

15. The electronic device of claim 14, wherein the processor is configured to cause the electronic device to reset the failsafe flag if the processor determines that the electronic device has successfully connected to the fabric, the first local area network, or the second local area network to successfully complete a connectivity test.

16. Non-transitory, computer-readable medium having stored thereon instructions, which when executed by a processor are configured to cause a joining device to:

connect to an assisting device through an unsecure port in a first local area network, wherein the assisting device resides on the fabric and is configured to assist the joining device in joining the fabric;

connect, via an access point of a second local area network, to a commissioning device through the connection to the assisting device, wherein the assisting device connects to the commissioning device through the second local area network, and wherein the commissioning device is configured to manage access to the fabric;

receive fabric credentials for the fabric via the connection to the commissioning device;

upon receipt of the fabric network credentials, activate a failsafe flag that is configured to block the joining device from storing the fabric network credentials or network information for fabrics or networks to which the joining device is unable to connect or complete a successful connectivity test; and

join the fabric using the received fabric credentials.

17. The non-transitory, computer-readable medium of claim 16, wherein the instructions are configured to cause the joining device to:

receive first local area network credentials for the first local area network;

save the first local area network credentials;

test connectivity to the commissioning device via the first local area network using the first local area network credentials; and

if connectivity test passes;

persistently store the first local area network credentials; and

enable communications via the first local area network.

18. The non-transitory, computer-readable medium of claim 16, wherein connecting to the commissioning device through the assisting device comprises establishing a secure communication session with the commissioning device by authenticating the identity of the joining device using a pairing code corresponding to a device identifier for the joining device and negotiating session keys using the pairing code.

19. The non-transitory, computer-readable medium of claim 17, wherein the instructions are configured to cause the processor to:

obtain second local area network credentials for the second local area network from the commissioning device via the assisting device; and

join the second local area network credentials received from the commissioning device.

20. The non-transitory, computer-readable medium of claim 16, wherein the instructions are configured to cause the joining device to:

receive, from the commissioning device, fabric service configuration information, wherein the fabric service configuration information contains information with which devices in the fabric connect to a remote service; and

connect to the remote service using the fabric service configuration information after connecting to the fabric.

21. The non-transitory, computer-readable medium of claim 16, wherein the instructions are configured to cause the joining device to:

determine if the failsafe flag has remained active for a pre-determined period of time after the failsafe flag has been activated; and

if the failsafe flag has remained active for the pre-determined period of time, delete any received fabric or network configuration details.

22. The non-transitory, computer-readable medium of claim 21, wherein the instructions are configured to cause the joining device to reset the failsafe flag if the processor determines that the joining device has successfully connected to the fabric, the first local area network, or the second local area network to successfully complete a connectivity test.