Authorization for device interaction with a remote service

• US 20070185992A1
• Filed: 02/07/2006
• Published: 08/09/2007
• Est. Priority Date: 02/07/2006
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Simpson, Shell
• Granted Patent: US 8,070,059 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response

Abstract

A method for authorizing device interaction includes requesting, from a connected device, authorization data from a remote service. At the connected device, authorization data is received and then passed with an authorization prompt to a user interface device. From the connected device, a user interface device response to the prompt is passed to the remote service. At the connected device, authorization setting data is received and stored. The authorization setting data has a value determined according to the user interface device response and is useable by the connected device to determine authorization for subsequent connected device interaction with the remote service.

Claims

1. A method for authorizing device interaction, comprising:

at a connected device, requesting authorization data from a remote service;

at the connected device, receiving and passing the authorization data with an authorization prompt to a user interface device;

from the connected device, passing a user interface device response to the prompt to the remote service; and

at the connected device, receiving and storing authorization setting data having a value determined according to the user interface device response, the authorization setting data useable by the connected device to determine authorization for subsequent connected device interaction with the remote service.

2. The method of claim 1:

further comprising, receiving an access request from the user interface device, the access request including remote service access data, and

wherein requesting comprises, from the connected device, accessing the remote service using the remote service access data to request the authorization data.

3. The method of claim 2, wherein the access request from the user interface device resulted from a redirection instruction sent from the remote service to the user interface device, the redirection instruction including the remote service access data and session data for identifying a relationship between the user interface device and the remote service, and wherein requesting comprises, from the connected device, accessing the remote service using the remote service access data to request the authorization data, the request including the session data.

4. The method of claim 1, further comprising, limiting connected device interaction with the remote service, at least partly, according to the authorization setting data.

5. The method of claim 1, further comprising:

receiving, at the remote service, access data for a connected device;

from the remote service, redirecting the user interface device to the connected device using the access data;

at the remote service, receiving the request for authorization data from the connected device;

returning, from the remote service, the authorization data to the connected device;

at the remote service, receiving the user interface device response from the connected device; and

from the remote service, returning the authorization setting data to the connected device.

6. The method of claim 5, wherein:

redirecting includes sending the user interface device a redirection instruction that includes remote service access data for use by the connected device to access the remote service and session data identifying a relationship between the user interface device and the remote service;

receiving the request for authorization data includes, at the remote service, receiving the request for authorization data from the connected device, the request including the session data; and

returning the authorization data includes returning, from the remote service, authorization data customized, at least partly, according to the session data.

7. A computer readable medium having computer executable instructions for:

causing a connected device to request authorization data from a remote service;

at the connected device, receiving and passing the authorization data with an authorization prompt to a user interface device;

from the connected device, passing a user interface device response to the prompt to the remote service; and

at the connected device, receiving and storing authorization setting data having a value determined according to the user interface device response, the authorization setting data useable by the connected device to determine authorization for subsequent connected device interaction with the remote service.

8. The medium of claim 7:

having further instructions for receiving an access request from the user interface device, the access request including remote service access data, and

wherein the instructions for requesting includes instructions for, from the connected device, accessing the remote service using the remote service access data to request the authorization data.

9. The medium of claim 8, wherein the access request resulted from a redirection instruction sent from the remote service to the user interface device, the redirection instruction including the remote service access data and session data for identifying a relationship between the user interface device and the remote service, and wherein the instructions for requesting include instructions for, from the connected device, accessing the remote service using the remote service access data to request the authorization data, the request including the session data.

10. The medium of claim 7, having further instructions for limiting connected device interaction with the remote service, at least partly, according to the stored authorization setting data.

11. The medium of claim 7, having further instructions for:

receiving, at the remote service, connected device access data;

from the remote service, redirecting the user interface device to the connected device using the connected device access data;

at the remote service, receiving a request for the authorization data from the connected device;

returning, from the remote service, the authorization data to the connected device;

at the remote service, receiving the user interface device response from the connected device; and

from the remote service, returning authorization setting data to the connected device.

12. The medium of claim 11, wherein the instructions for:

redirecting include instructions for sending the user interface device a redirection instruction that includes remote service access data for use by the connected device to access the remote service and session data identifying a relationship between the user interface device and the remote service;

receiving the request for authorization data include instructions for, at the remote service, receiving a request for the authorization data from the connected device, the request including the session data; and

returning the authorization data include instructions for returning, from the remote service, authorization data customized, at least partly, according to the session data.

13. A connected device implemented system for authorizing device interaction, comprising;

device communication logic operable to request and receive authorization data from a remote service, the authorization data including an authorization prompt, to pass the authorization data to a user interface device, to pass a user interface device response to the authorization prompt to the remote service, and to receive authorization setting data having a value determined according to the user interface device response; and

authorization logic operable to store and utilize the authorization setting data to determine authorization for subsequent connected device interaction with the remote service.

14. The system of claim 13, wherein:

the device communication logic is operable to receive an access request from the user interface device, the access request including remote service access data, and to access the remote service using the remote service access data to request the authorization data.

15. The system of claim 14, wherein the access request from the user interface device resulted from a redirection instruction sent from the remote service to the user interface device, the redirection instruction including the remote service access data and session data for identifying a relationship between the user interface device and the remote service, and wherein the device communication logic is operable to access the remote service using the remote service access data to request the authorization data, the request including the session data.

16. The system of claim 13, wherein the device authorization logic is operable to limit device interaction with the remote service, at least partly, according to the authorization setting data.

17. The system of claim 13, further comprising remote communication logic and remote authorization logic, wherein:

the remote communication logic is operable to receive the connected device access data from a user interface device, send an instruction to redirect the user interface device to the connected device using the connected device access data, receive a request for the authorization data from the connected device, return the authorization data to the connected device, receive the user interface device response from the connected device, and return the authorization setting data to the connected device; and

the remote authorization logic operable to determine a value for the authorization setting data according to the user interface device response.

18. The system of claim 17, wherein the remote communication logic is operable to send the user interface device a redirection instruction that includes remote service access data for use by the connected device to access the remote service.

19. The system of claim 18, wherein:

the remote communication logic is operable to send the user interface device a redirection instruction that includes remote service access data for use by the connected device to access the remote service and session data identifying a relationship between the user interface device and the remote service and to receive a request for authorization data from the connected device, the request including the session data; and

the remote authorization logic is operable to cause the remote communication logic to return authorization data customized, at least partly, according to the session data.

20. The system of claim 17:

wherein the remote authorization logic is operable to cause the remote communication logic to return authorization data to the connected device that includes a human key prompt;

wherein the remote communication logic is operable to receive a user interface device response from the connected device, the response including a response to the authorization prompt and a human key entered at the user interface device in response to the human key prompt; and

the remote authorization logic is operable to verify the human key before the remote communication logic returns the authorization setting data to the connected device.