PROVIDING SERVICES TO A GUEST DEVICE IN A PERSONAL NETWORK

• US 20090064346A1
• Filed: 11/09/2007
• Published: 03/05/2009
• Est. Priority Date: 09/03/2007
• Status: Active Grant

• Current Assignee: Sony Ericsson Mobile Communications USA Incorporated (Sony Group Corp.)
• Original Assignee: Sony Ericsson Mobile Communications (Sony Group Corp.)
• Inventors: MINOR, Sten Hakan, Ostsjo, Anders Wilhelm, BENGTSSON, Henrik Sven, LARSSON, Bo Hakan, STAVENOW, Bengt Gunnar, RITZAU, Jan Robert Tobias
• Granted Patent: US 8,353,052 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method may include sending personal network connection information from a mobile device to a guest device; sending authentication credentials from the mobile device to the guest device; receiving the authentication credentials in the personal network from the guest device; authenticating the guest device based on the authentication credentials; and granting access to the guest device to content stored in the personal network for a guest session.

Claims

1. A system comprising:

a personal network;

a mobile communications device including a transmitter to send authentication credentials and connection information for the personal network to a guest device for accessing the personal network;

the personal network including a proxy, the proxy comprising;

a receiver to receive the authentication credentials from the guest device; and

a processor to authenticate the guest device based on the authentication credentials received from the guest device and to authorize the guest device to access content stored in the personal network for a guest session.

2. The system of claim 1, where the authentication credentials are first authentication credentials, and where the transmitter of the mobile communications device transmits second authentication credentials to the guest device.

3. The system of claim 2, where the first authentication credentials include information indicative of a first expiration time, and wherein the processor of the proxy re-authenticates the guest device based on the second authentication credentials after a time based on the first expiration time.

4. The system of claim 3, where the second authentication credentials include a second expiration time after which the second authentication credentials are not valid.

5. The system of claim 3, where the proxy limits access to content by the guest device based on privilege information stored in the proxy.

6. The system of claim 5, where the mobile communications device transmits the privilege information to the proxy.

7. The system of claim 1, where the mobile communications device includes a processor to generate the authentication credentials.

8. The system of claim 1, where the transmitter of the mobile communications device includes one or more of a short-range communications transmitter or a near field communication transmitter.

9. The system of claim 1, where the processor of the proxy is further configured to generate the authentication credentials.

10. The system of claim 9, where the proxy further includes a transmitter to send the authentication credentials to the mobile communications device.

11. The system of claim 9, where the transmitter of the mobile communications device is further configured to send connection information about the guest device to the proxy.

12. A method comprising:

sending connection information about a personal network from a mobile communications device to a guest device; and

sending authentication credentials from the mobile device to the guest device, where the authentication credentials are used to authenticate the guest device in the personal network and authorize the guest device to access content stored in the personal network for a guest session.

13. The method of claim 12, further comprising:

generating the authentication credentials in the mobile communications device.

14. The method of claim 13, further comprising:

sending privilege information from the mobile device to a proxy, where the privilege information is used to limit access to content by the guest device.

15. The method of claim 12, where the authentication credentials are first authentication credentials, and where the mobile communications device transmits second authentication credentials to the guest device.

16. The method of claim 15, where the first authentication credentials include information indicative of a first expiration time and the second authentication credentials are used to re-authenticate the guest device in the personal network after a time based on the first expiration time.

17. The method of claim 16, where the second authentication credentials include information indicative of a second expiration time after which the second authentication credentials are not valid.

18. The method of claim 12, where transmitting the authentication credentials includes transmitting the authentication credentials with a short-range communication transmitter or a near field communication transmitter.

19. The method of claim 12, further comprising receiving the authentication credentials from a proxy in the personal network.

20. The method of claim 19, further comprising sending connection information about the guest device to the proxy in the personal network.

22. The mobile communications device of claim 19, where the first authentication credentials include information indicative of a first expiration time and where the guest device is re-authenticated based on the second authentication credentials after a time based on the first expiration time.

23. The mobile communications device of claim 19, further comprising a processor to generate the first and the second authentication credentials.

24. The mobile communications device of claim 19, where the transmitter of the mobile communications device includes a short-range communication transmitter or a near field communication transmitter.

25. The mobile communications device of claim 19, further comprising a receiver to receive the first authentication credentials from a proxy in the personal network.

26. The mobile communications device of claim 23, where the transmitter is further configured to send connection information about the guest device to the proxy.

21. A mobile communications device comprising:

a transmitter to send first authentication credentials and connection information for a personal network to a guest device;

where the first authentication credentials are used to authenticate the guest device in the personal network and authorize the guest device to access content stored in the personal network for a guest session; and

where the transmitter sends second authentication credentials to the guest device to re-authenticate the guest device in the personal network.