Bluetooth device as security access key

• US 10,362,484 B2
• Filed: 07/17/2017
• Issued: 07/23/2019
• Est. Priority Date: 06/27/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Rosenblatt, Michael
• Primary Examiner(s): Lanier, Benjamin E
• Application Number:
  US15/652,099
• Publication Number:
  US 20180041902A1
• Time in Patent Office: 736 Days
• Field of Search: None
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/08 Access security

Abstract

This application is directed to a system for remotely directing a host device to perform an operation using a key. The key may include a communications circuitry for transmitting data, for example a key identifier or an instruction to perform an operation, within a personal area network created by the communications circuitry. When a host device is within the personal area network, the key may transmit data received by a transceiver on the host device. In response to receiving the data, the host device may perform an operation (e.g., an authentication operation). In some embodiments, the key may transmit data identifying an operation for the host device to perform. In some embodiments, the host device may store in memory key identification information and an associated operation which may be retrieved when the key is brought in proximity of the host device.

Claims

1. A method for directing a remote computing device to execute a first operation, the method comprising, at an electronic key:

detecting an identity of the remote computing device;

retrieving, from a set of preference data stored on the electronic key, a first subset of preference data based at least in part on the identity, wherein the set of preference data comprises different subsets of preference data for a plurality of different remote computing devices;

retrieving authentication information for the electronic key based on the identity, wherein the authentication information is stored on the electronic key and corresponds to the identity;

transmitting, to the remote computing device, a first public key associated with the electronic key;

receiving, from the remote computing device, a second public key associated with the remote computing device;

generating an encryption key based on (1) the second public key associated with the remote computing device, and (2) a private key that is a counterpart to the first public key associated with the electronic key;

establishing a secure communication channel with the remote computing device based on the encryption key, wherein the remote computing device is operating in accordance with a first state;

responsive to establishing the secure communication channel with the remote computing device based on the encryption key, communicating, to the remote computing device over the secure communication channel, the first subset and the authentication information, wherein the remote computing device authenticates the electronic key using the authentication information and executes the first operation based at least in part on the first subset to cause the remote computing device to operate in accordance with a second state that is distinct from the first state; and

terminating the secure communication channel with the remote computing device to cause the remote computing device to restore operating in accordance with the first state.

2. The method of claim 1, further comprising:

establishing a different identity associated with a different remote computing device from the plurality of different remote computing devices;

retrieving a second subset of preference data, from the set of preference data, based at least in part on the different identity; and

communicating, to the different remote computing device over a different communication channel, the second subset, wherein the different remote computing device executes a second operation based at least in part on the second subset, and the first and second operations are different.

3. The method of claim 2, wherein the first subset comprises music preference data and the second subset comprises television preference data.

4. The method of claim 1, wherein communicating the first subset further comprises:

communicating a set of instructions associated with the first subset for executing the first operation on the remote computing device.

5. The method of claim 4, wherein a first instruction from the set of instructions activates the remote computing device and a second instruction from the set of instructions loads the first subset of preference data.

6. The method of claim 1, further comprising:

ceasing to perform the first operation based at least in part on the electronic key being beyond a threshold distance range from the remote computing device.

7. The method of claim 1, wherein the secure communication channel is formed over Wi-Fi, Bluetooth, Nordic, high frequency transmission, short-range radio circuitry, and infrared.

8. An electronic key, comprising:

at least one processor; and

at least one memory configured to store instructions that, when executed by the at least one processor, cause the electronic key to;

detect an identity of a remote computing device;

retrieve, from a set of preference data stored on the electronic key, a first subset of preference data based at least in part on the identity, wherein the set of preference data comprises different subsets of preference data for a plurality of different remote computing devices;

retrieve authentication information for the electronic key based on the identity, wherein the authentication information is stored on the electronic key and corresponds to the identity of the remote computing device;

transmit, to the remote computing device, a first public key associated with the electronic key;

receive, from the remote computing device, a second public key associated with the remote computing device;

generate an encryption key based on (1) the second public key associated with the remote computing device, and (2) a private key that is a counterpart to the first public key associated with the electronic key;

establish a secure communication channel with the remote computing device based on the encryption key, wherein the remote computing device is operating in accordance with a first state;

responsive to establishing the secure communication channel with the remote computing device based on the encryption key, communicate, to the remote computing device over the secure communication channel, the first subset and the authentication information, wherein the remote computing device authenticates the electronic key using the authentication information and executes a first operation based at least in part on the first subset to cause the remote computing device to operate in accordance with a second state that is distinct from the first state; and

terminate the secure communication channel with the remote computing device to cause the remote computing device to restore operating in accordance with the first state.

9. The electronic key of claim 8, wherein the at least one processor further causes the electronic key to:

establish a different identity associated with a different remote computing device from the plurality of different remote computing devices;

retrieve a second subset of preference data, from the set of preference data, based at least in part on the different identity; and

communicate, to the different remote computing device over a different communication channel, the second subset, wherein the different remote computing device executes a second operation based at least in part on the second subset, and the first and second operations are different.

10. The electronic key of claim 9, wherein the first subset comprises music preference data and the second subset comprises television preference data.

11. The electronic key of claim 8, wherein the at least one processor further causes the electronic key to:

communicate a set of instructions associated with the first subset for executing the first operation on the remote computing device.

12. The electronic key of claim 11, wherein a first instruction from the set of instructions activates the remote computing device and a second instruction from the set of instructions loads the first subset of preference data.

13. The electronic key of claim 8, wherein the at least one processor further causes the electronic key to:

cease performance of the first operation based at least in part on the electronic key being beyond a threshold distance range from the remote computing device.

14. The electronic key of claim 8, wherein the secure communication channel is one of Wi-Fi, Bluetooth, Nordic, high frequency transmission, short-range radio circuitry, and infrared.

15. At least one non-transitory machine-readable storage medium storing instructions that, when executed by at least one processor included in an electronic key, cause the electronic key to carry out steps that include:

detecting an identity of a remote computing device;

retrieving, from a set of preference data stored on the electronic key, a first subset of preference data based at least in part on the identity, wherein the set of preference data comprises different subsets of preference data for a plurality of different remote computing devices;

retrieving authentication information for the electronic key based on the identity, wherein the authentication information is stored on the electronic key and corresponds to the identity of the remote computing device;

transmitting, to the remote computing device, a first public key associated with the electronic key;

receiving, from the remote computing device, a second public key associated with the remote computing device;

generating an encryption key based on (1) the second public key associated with the remote computing device, and (2) a private key that is a counterpart to the first public key associated with the electronic key;

establishing a secure communication channel with the remote computing device based on the encryption key, wherein the remote computing device is operating in accordance with a first state;

responsive to establishing the secure communication channel with the remote computing device based on the encryption key, communicating, to the remote computing device over the secure communication channel, the first subset and the authentication information, wherein the remote computing device authenticates the electronic key using the authentication information and executes a first operation based at least in part on the first subset to cause the remote computing device to operate in accordance with a second state that is distinct from the first state; and

terminating the secure communication channel with the remote computing device to cause the remote computing device to restore operating in accordance with the first state.

16. The at least one non-transitory machine-readable storage medium of claim 15, wherein the steps further include:

establishing a different identity associated with a different remote computing device from the plurality of different remote computing devices;

retrieving a second subset of preference data, from the set of preference data, based at least in part on the different identity; and

communicating, to the different remote computing device over a different communication channel, the second subset, wherein the different remote computing device executes a second operation based at least in part on the second subset, and the first and second operations are different.

17. The at least one non-transitory machine-readable storage medium of claim 16, wherein the first subset comprises music preference data and the second subset comprises television preference data.

18. The at least one non-transitory machine-readable storage medium of claim 15, wherein the steps further include:

communicating a set of instructions associated with the first subset for executing the first operation on the remote computing device.

19. The at least one non-transitory machine-readable storage medium of claim 18, wherein a first instruction from the set of instructions activates the remote computing device and a second instruction from the set of instructions loads the first subset of preference data.

20. The at least one non-transitory machine-readable storage medium of claim 15, wherein the steps further include:

ceasing to perform the first operation based at least in part on the electronic key being beyond a threshold distance range from the remote computing device.