Security platform

• US 10,425,414 B1
• Filed: 08/31/2016
• Issued: 09/24/2019
• Est. Priority Date: 08/31/2015
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Buckingham, Thomas Bret, Karras, James, Shelton, John, Lester, Michael Wayne, Prasad, Bharat, McCarty, James Eric, Fernandez, Gabriel C., Casillas, Debra Randall, Rangarajan, Sudarshan, Wilkinson, Christopher Thomas
• Primary Examiner(s): Turchen, James R
• Application Number:
  US15/253,274
• Time in Patent Office: 1,119 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for interconnecting devices. One of the methods includes authenticating, by a security platform, a user. The method includes generating, by the security platform, an authentication token for the user. The method includes receiving a selection of an IoT application by the user, the IoT application configured to control an IoT device. The method includes providing, by the security platform, the authentication token to the IoT application to authenticate the user with the selected application. The method also includes providing, by the selected application, control of the IoT device to the user.

Claims

1. A computer-implemented method, comprising:

authenticating, by a security platform on a client device, a user of the client device, the security platform comprising a plurality of Internet of Things (IoT) applications, each of the IoT applications being configured to control at least one corresponding IoT device;

receiving, by the security platform on the client device, an authentication token for the user;

providing, in response to the authenticating, a plurality of graphical representations on a user interface of the client device, each graphical representation representing one of the IoT applications and prompting the user to select a particular IoT application represented by that graphical representation;

receiving selection data indicating a selection of a particular IoT application of the plurality of IoT applications by the user;

providing, by the security platform and based on the selection data, the authentication token to the selected particular IoT application to authenticate the user with the selected particular IoT application; and

providing, by the selected particular IoT application and the client device, control of at least one IoT device corresponding to the selected particular IoT application in response to receiving the authentication token.

2. The computer-implemented method of claim 1, further comprising:

receiving data indicating a selection of an uninstalled IoT application from a list of certified IoT applications, wherein the certified IoT applications are certified as functioning with the security platform; and

installing, on the security platform, the selected uninstalled IoT application.

3. The computer-implemented method of claim 1, further comprising:

sending a command to a first IoT device based on a trigger provided by a second IoT device.

4. The computer-implemented method of claim 1, further comprising:

sending a command to a first IoT device based on a location of the client device.

5. The computer-implemented method of claim 1, further comprising:

certifying, by a computer system, a first IoT application for use with the security platform;

wherein certifying comprises;

verifying that the first IoT application will accept a first authentication token as proof of identify; and

verifying that the first IoT application provides a predetermined level of security.

6. The computer-implemented method of claim 1, further comprising:

tracking the ownership of at the least one IoT devices controlled by the user.

7. The computer-implemented method of claim 6, wherein tracking comprises adding records of IoT devices owned by the user to a blockchain.

8. The computer-implemented method of claim 7, wherein tracking comprises one of adding a record indicating that an IoT device of the at least one IoT device was acquired by the user and adding a recording indicting that an IoT device was relinquished by the user.

9. A non-transitory computer storage medium encoded with computer program instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:

authenticating, by a security platform on a client device, a user of the client device, the security platform comprising a plurality of Internet of Things (IoT) applications, each of the IoT applications being configured to control at least one corresponding IoT device;

receiving, by the security platform on the client device, an authentication token for the user;

providing, in response to the authenticating, a plurality of graphical representations on a user interface of the client device, each graphical representation representing one of the IoT applications and prompting the user to select a particular IoT application represented by that graphical representation;

receiving selection data indicating a selection of a particular IoT application of the plurality of IoT applications by the user;

providing, by the security platform and based on the selection data, the authentication token to the selected particular IoT application to authenticate the user with the selected particular IoT application; and

providing, by the selected particular IoT application and the client device, control of at least one IoT device corresponding to the selected particular IoT application in response to receiving the authentication token.

10. The non-transitory computer storage medium of claim 9, further comprising:

receiving data indicating a selection of an uninstalled IoT application from a list of certified IoT applications, wherein the certified IoT applications are certified as functioning with the security platform; and

installing, on the security platform, the selected uninstalled IoT application.

11. The non-transitory computer storage medium of claim 9, further comprising:

sending a command to a first IoT device based on a trigger provided by a second IoT device.

12. The non-transitory computer storage medium of claim 9, further comprising:

sending a command to a first IoT device based on a location of the client device.

13. The non-transitory computer storage medium of claim 9, further comprising:

certifying, by a computer system, a first IoT application for use with the security platform;

wherein certifying comprises;

verifying that the first IoT application will accept a first authentication token as proof of identify; and

verifying that the first IoT application provides a predetermined level of security.

14. The non-transitory computer storage medium of claim 9, further comprising:

tracking the ownership of the at least one IoT devices controlled by the user.

15. A system comprising:

one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising;

authenticating, by a security platform on a client device, a user of the client device, the security platform comprising a plurality of Internet of Things (IoT) applications, each of the IoT applications being configured to control at least one corresponding IoT device;

receiving, by the security platform on the client device, an authentication token for the user;

providing, in response to the authenticating, a plurality of graphical representations on a user interface of the client device, each graphical representation representing one of the IoT applications and prompting the user to select a particular IoT application represented by that graphical representation;

receiving selection data indicating a selection of a particular IoT application of the plurality of IoT applications by the user;

providing, by the security platform and based on the selection data, the authentication token to the selected particular IoT application to authenticate the user with the selected particular IoT application; and

providing, by the selected particular IoT application and the client device, control of at least one IoT device corresponding to the selected particular IoT application in response to receiving the authentication token.

16. The system of claim 15, further comprising:

receiving data indicating a selection of an uninstalled IoT application from a list of certified IoT applications, wherein the certified IoT applications are certified as functioning with the security platform; and

installing, on the security platform, the selected uninstalled IoT application.

17. The system of claim 15, further comprising:

sending a command to a first IoT device based on a trigger provided by a second IoT device.

18. The system of claim 15, further comprising:

sending a command to a first IoT device based on a location of the client device.

19. The system of claim 15, further comprising:

certifying, by a computer system, a first IoT application for use with the security platform;

wherein certifying comprises;

verifying that the first IoT application will accept a first authentication token as proof of identify; and

verifying that the first IoT application provides a predetermined level of security.

20. The system of claim 15, further comprising:

tracking the ownership of at the least one IoT device controlled by the user.