Providing limited access to a service device via an intermediary

• US 10,417,852 B2
• Filed: 09/21/2016
• Issued: 09/17/2019
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Tahoe Research Limited (f/k/a Learndale Limited) (Vector Capital Corporation)
• Original Assignee: Intel Corporation
• Inventors: Kohlenberg, Tobias, Birkel, Steven, Wouhaybi, Rita, Mo, Stanley
• Primary Examiner(s): Feild, Joseph H
• Assistant Examiner(s): Akhter, Sharmin
• Application Number:
  US15/271,501
• Publication Number:
  US 20170076525A1
• Time in Patent Office: 1,091 Days
• Field of Search: 340 51, 340 57- 572, 340 1222, 34042613-42617, 34042635, 34042636, 34053914-53915
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00857 where the code of the data carrier can be programmed
• CPC Class Codes: G08C 17/02 using a radio link
• CPC Class Codes: G08C 2201/40 Remote control systems using repeaters, converters, gateways
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/046 involving vehicles, e.g. floating traffic data [FTD] or vehicle traffic prediction
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

Systems and methods may provide for brokering limited access to a service device via an intermediary. In one example, the method may include receiving a request communication at a control device including a request for limited access to a service device, wherein the request is received from an intermediary device on behalf of a request device, and transmitting an access communication to the intermediary device, wherein the access communication includes an access ticket to be used by the request device to gain the limited access of the service device.

Claims

1. At least one non-transitory computer readable storage medium comprising a set of instructions which, when executed by a processor, cause a device to:

receive a request communication including a request of limited access of one or more service devices at one or more control devices, wherein the request is received from a mobile intermediary device on behalf of a request device;

transmit an access communication to the mobile intermediary device, wherein the access communication includes an access ticket to be used by the request device to gain the limited access of the one or more service devices; and

authenticate the request of the limited access to the one or more service devices to allow the limited access of the one or more service devices by the request device, wherein authenticating the request of the limited access to the service device is to include determining if the access ticket originated at the one or more control devices.

2. The at least one non-transitory computer readable storage medium of claim 1, wherein the access ticket includes a scope of the limited access of the one or more service devices, wherein the scope of limited access is based on an access request ticket included in the request communication.

3. The at least one non-transitory computer readable storage medium of claim 2, wherein the scope of limited access of the one or more service devices is limited by one or more of time and distance.

4. The at least one non-transitory computer readable storage medium of claim 1, wherein authentication of the request uses an authentication and access protocol.

5. The at least one non-transitory computer readable storage medium of claim 4, wherein the authentication and access protocol is Kerberos.

6. A device comprising:

a request module to receive a request communication including a request of limited access of one or more service devices at one or more control devices, wherein the request is received from a mobile intermediary device on behalf of a request device;

a transmit module to transmit an access communication to the mobile intermediary device, wherein the access communication includes an access ticket to be used by the request device to gain the limited access of the one or more service devices; and

an authentication module to authenticate the request of the limited access of the one or more service devices at the one or more control devices using an authentication and access protocol.

7. The control device of claim 6, wherein the access ticket includes a scope of the limited access of the one or more service devices, wherein the scope of the limited access is based on an access request ticket included in the request communication.

8. The control device of claim 7, wherein the scope of limited access of the one or more service devices is limited by one or more of time and distance.

9. The control device of claim 6, wherein the authentication and access protocol is Kerberos.

10. At least one non-transitory computer readable storage medium comprising a set of instructions which, when executed by a processor, cause a service device to:

receive a request communication from a request device including a request of limited access of one or more service devices, wherein the request communication includes an access ticket originating at one or more control devices and sent via a mobile intermediary device;

authenticate the request of the limited access to the one or more service devices to allow the limited access of the one or more service devices by the request device wherein authenticating the request is to include determining if the access ticket originated at the one or more control devices.

11. The at least one non-transitory computer readable storage medium of claim 10, wherein authenticating the request of the limited access to the one or more service devices to allow limited access is to include determining if the access ticket originated at the one or more control devices.

12. The at least one non-transitory computer readable storage medium of claim 10, wherein the request of the limited access to the one or more service devices is authenticated using Kerberos.

13. The at least one non-transitory computer readable storage medium of claim 10, wherein a scope of the limited access of the one or more service devices is to be limited by one or more of time and distance.

14. A device comprising:

a transceiver;

a receiving module to receive a request communication from a request device including a request of limited access of one or more service devices, wherein the request communication includes an access ticket originating at one or more control devices and sent via a mobile intermediary device; and

an authentication module to authenticate the request of the limited access to the one or more service devices to the allow limited access of the one or more service devices by the request device.

15. The service device of claim 14, wherein authenticating the request of the limited access to the one or more service devices to allow limited access is to include determining if the access ticket originated at the one or more control devices.

16. The service device of claim 14, wherein the request of the limited access to the one or more service devices is authenticated using Kerberos.

17. The service device of claim 14, wherein a scope of the limited access of the one or more service devices is limited by one or more of time and distance.

18. At least one non-transitory computer readable storage medium comprising a set of instructions which, when executed by a processor, cause a mobile intermediary device to:

receive a request communication from a request device, wherein the request communication includes a request of limited access of one or more service devices;

transmit an access request communication to one or more control devices, wherein the access request communication includes an access request ticket describing a requested scope of the limited access of the one or more service devices;

receive an access communication from the one or more control devices, wherein the access communication is to include an access ticket describing a granted scope of the limited access of the one or more service devices; and

transmit an transfer communication to the request device, wherein the transfer communication is to include the access ticket.

19. The at least one non-transitory computer readable storage medium of claim 18, wherein, when executed, the set of instructions cause the mobile intermediary device to create a secure connection with the request device.

20. The at least one non-transitory computer readable storage medium of claim 18, wherein the requested scope of the limited access of the one or more service devices is limited by one or more of time and distance.

21. The at least one non-transitory computer readable storage medium of claim 18, wherein the request communication, the access request communication, the access communication and the transfer communication utilize an authentication and access protocol.

22. The at least one non-transitory computer readable storage medium of claim 21, wherein the authentication and access protocol is Kerberos.

23. A method of operating a mobile intermediary device comprising:

receiving a request communication from a request device, wherein the request communication includes a request of limited access of one or more service devices;

transmitting an access request communication to one or more control devices, wherein the access request communication includes an access request ticket describing a requested scope of the limited access of the one or more service devices;

receiving an access communication from the one or more control devices, wherein the access communication includes an access ticket describing a granted scope of the limited access of the one or more service devices; and

transmitting a transfer communication to the request device, wherein the transfer communication includes the access ticket.

24. The method of claim 23, further including creating a secure connection with the request device.

25. The method of claim 23, wherein the request communication, the access request communication, the access communication and the transfer communication utilize an authentication and access protocol.

26. The method of claim 25, wherein the authentication and access protocol is Kerberos.