Connecting mobile devices, internet-connected hosts, and cloud services

• US 20120252405A1
• Filed: 05/27/2011
• Published: 10/04/2012
• Est. Priority Date: 03/31/2011
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Lortz, Victor B., Rangarajan, Anand P., Kesavan, Vijay Sarathi, Rathi, Somya
• Granted Patent: US 9,268,545 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Applications are downloaded to a device from a cloud-based service by establishing trust with between the device and a host system. The host system and the cloud-based service have a pre-existing trust relationship.

Claims

1. A method performed by a device, of downloading an application from a cloud-based service comprising:

establishing a local connection between the device and a host system;

receiving a uniform resource locator (URL) from the host system;

connecting to the cloud-based service through the URL;

downloading and installing the application from the cloud-based service; and

connecting to the host system and cloud-based service.

2. The method of claim 1, wherein a pre-existing trust relationship exists between the host system and the cloud-based service.

3. The method of claim 1, wherein the establishing a local connection includes performing out of band exchange of data using one or more of the following:

NFC touch, infrared, 1-D or 2-D barcode, accelerometer bump, time-limited push-button configuration, and/or PIN number entry.

4. The method of claim 1, wherein the receiving the URL from the host system is through one of a quick response (QR) code that is read from the host system or near field communication (NFC) NDEF URL record.

5. The method of claim 4, wherein the URL is processed by a web browser of the device to enable downloading of the application.

6. The method of claim 1, wherein the downloading and installing the application includes verification of a setup identifier provided by the host system to the device.

7. The method of claim 1 further comprising receiving a corrected pre-configured application from the host system.

8. The method of claim 1 further comprising redirecting to another URL to receive one or more applications.

9. The method of claim 1 further comprising downloading security configuration from the cloud-based service.

10. The method of claim 1 further comprising confirming a second device to receive access rights to the host system.

11. The method of claim 1, wherein the method is performed by a mobile device.

12. A device comprising:

one or more processors;

a wireless interface coupled to the one or more processors, to connect with a host system, receive a uniform resource locator (URL) to a cloud-based service from the host system, a setup identifier, and a secret; and

a memory coupled to the one or more processors and wireless interface to store the URL, the setup identifier, and secret, wherein the wireless interfaces uses the URL to connect to the cloud-based service to download applications to be stored in the memory.

13. The device of claim 12, wherein the wireless interface includes a local channel that is an out of band channel.

14. The device of claim 12, further comprising one or more of the following:

a near field reader and a quick response reader, and connection to the host system is performed using one of near field communication or quick response code, and wherein the receive from the host system is performed using one of near field communication (NFC) or quick response (QR) code.

15. The device of claim 12, wherein connecting to the cloud-based service is through an Internet connection.

16. The device of claim 12, wherein the download of one or more applications includes downloading security configuration.

17. The device of claim 12, wherein the host system is one of a personal computer, a set top box, a television, a mobile device, or a vehicle.

18. The device of claim 12, wherein the memory includes a web browser that reads the URL and is redirected to a different URL for downloading as instructed by the cloud-based service.

19. The device of claim 12, wherein the device is a mobile device.

20. One or more non-transitory computer-readable media having stored thereon computer executable instructions that, when executed, perform a method comprising:

connecting locally to a host system;

receiving a uniform resource locator to a cloud-based service from the host system;

connecting to the cloud-based service through the URL; and

downloading and installing applications through the cloud-based service.

21. The computer-readable media of claim 20, wherein the connecting is through a local out of band channel.

22. The computer-readable media of claim 20 further receiving secrets from the host system to establish trust between with the cloud-based service.

23. A device comprising:

one or more processors;

memory configured to the one or more processors, having instructions to;

establish a local connection to a host system;

receive one or more of the following from the host system through the local connection;

a uniform resource indicator to a cloud-based service, a setup identifier, and a secret;

connect to the cloud-based service; and

download one or more applications once connected to the cloud-based service.

24. The device of claim 23, wherein the local channel is an out of band channel.

25. The device of claim 23, further comprising one or more of the following:

a near field reader and a quick response reader, and the establish local connection is performed using one of near field communication or quick response code, and wherein the receive from the host system is performed using one of near field communication (NFC) or quick response (QR) code.

26. The device of claim 23, wherein the connect to the cloud-based service is through an Internet connection.

27. The mobile device of claim 23, wherein the download one or more applications includes downloading security configuration.

28. The mobile device of claim 23, wherein the host system is one of a personal computer, a set top box, a television, another mobile device, or a vehicle.

29. The mobile device of claim 23, wherein the memory includes a web browser that reads the URL and is redirected to a different URL for downloading as instructed by the cloud-based service.

30. A method performed by a host system to allow a device download applications comprising:

establishing trust with a cloud-based service;

receiving a request to connect the device to the host system and/or connect the device to the cloud-based service; and

sending setup data to the cloud-based service to be sent to the device for use in downloading applications.

31. The method of claim 30, wherein the establishing trust is performed during a manufacturing of the host system.

32. The method of claim 30, wherein the establishing the trust relationship includes digital certificates and hardware protection mechanisms implementing a secure boot process with software attestation and hardware-protected key storage, implemented by the host system to maintain integrity of the trust relationship.

33. The method of claim 30, wherein the sending includes sending a configuration and setup identification to the cloud-based system.

34. The method of claim 30, wherein the host system is a vehicle.