ACCESSORY DEVICE AUTHENTICATION

• US 20120278882A1
• Filed: 05/17/2012
• Published: 11/01/2012
• Est. Priority Date: 09/08/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Lydon, Gregory T., Schubert, Emily Clark
• Granted Patent: US 8,509,691 B2
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 2209/043 of tables, e.g. lookup, substitution or mapping
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation

Abstract

An authentication controller coupled to a first communication port of a portable computing device is allowed to provide authentication on behalf of an accessory device coupled to a second communication port of the portable computing device. In one embodiment, a dongle that includes an authentication controller can be coupled with the portable computing device. Accessory devices can also be coupled with the portable computing device through other ports, including wireless ports. The dongle can provide cross-transport authentication for accessories that do not include authentication controllers. Once the dongle had been properly authenticated, the permissions granted to the dongle port can be transferred to a communication port coupled with an accessory.

Claims

1. A method for authenticating an accessory, the method comprising:

determining, by a portable media device, that an authentication device is coupled to a first port of the portable media device;

determining, by the portable media device, that the accessory is coupled to a second port of the portable media device;

receiving, by the portable media device, an authentication request from the authentication device, the authentication request being for authenticating the second port;

exchanging, by the portable media device, authentication information with the authentication device; and

authenticating, by portable media device, the second port based on the authentication information.

2. The method of claim 1 further comprising:

receiving, by the portable media device, a request for sending information on whether the portable media device supports cross transport authentication; and

sending, by the portable media device, a response indicating that the portable media device supports cross transport authentication.

3. The method of claim 1 wherein the authenticating further comprises:

granting a set of permissions for communication via the first port; and

transferring a sub-set of permissions, from the set of permissions, to the second port.

4. The method of claim 3 further comprising:

revoking the sub-set of permissions upon determining that the accessory has been disconnected from the second port.

5. The method of claim 1 further comprising:

receiving, by the portable media device, a request for sending an identifier associated with the portable media device; and

sending, by the portable media device, the identifier,

wherein the identifier is used by the authentication device to determine whether the portable media device supports cross transport authentication.

6. A method comprising:

determining, by an accessory, that the accessory is connected to a first port of a portable media device, wherein an authentication controller is coupled to a second port of the portable media device;

sending, by the accessory, a message to the portable media device requesting information on whether the portable media device supports cross transport authentication;

receiving, by the accessory, a response that the portable media device supports cross transport authentication;

waiting, by the accessory, a predetermined time to allow the authentication controller to be authenticated by the portable media device via the second port;

sending, by the accessory to the portable media device, upon expiration of the predetermined time, a request for granting a set of permissions to the first port;

receiving, by the accessory from the portable media device, indication that the set of permissions have been granted to the first port, wherein the set of permissions are transferred from the second port; and

communicating, by the accessory with the portable media device, using the set of permissions.

7. The method of claim 6 further comprising sending, by the accessory, an identify message to the portable media device including an identifier associated with the accessory.

8. The method of claim 6 further comprising:

receiving, by the accessory from the portable electronic device, a second request for identifying the accessory, the second request being received after the portable electronic device recovers from a power outage;

determining, by the accessory based on information stored in a cache, whether the portable electronic device supports cross transport authentication; and

re-sending, by the accessory to the portable media device, the request for granting the set of permissions to the first port.

9. A portable media device comprising:

a first port;

a second port; and

control logic coupled to the first port and the second port, wherein the control logic is configured to;

determine that an authentication device is coupled to the first port;

determine that an accessory is coupled to the second port;

receive an authentication request from the authentication device, the authentication request being for authenticating the second port;

exchange authentication information with the authentication device via the first port; and

authenticate the second port based on the authentication information.

10. The portable media device of claim 9 wherein the control logic is further configured to:

receive a message from the authentication device requesting information on whether the portable media device supports cross transport authentication; and

send a response to the authentication device either confirming or denying that the portable media device supports cross transport authentication.

11. The portable media device of claim 9 wherein to authenticate the second port the control logic is further configured to:

grant a set of permissions to the first port; and

transfer at least a sub-set of permissions, from the set of permissions, to the second port.

12. The portable media device of claim 11 wherein the control logic is further configured to communicate with the accessory using the sub-set of permissions.

13. The portable media device of claim 9 wherein the control logic is further configured to revoke the sub-set of permissions if the accessory is decoupled from the first port.

14. The portable media device of claim 9 wherein the control logic is further configured to revoke the set of permissions and the sub-set of permissions if the authentication device is decoupled from the second port.

15. The portable media device of claim 9 wherein the control logic is further configured to revoke the set of permissions in the event that the portable media device loses power, is shut down, enters a sleep mode, or wakes up from a sleep mode.

16. A method comprising:

detecting, by a portable media device, connection of an authentication device to a first port of the portable media device;

detecting, by the portable media device, coupling of a first accessory with a second port of the portable media device;

receiving, by the portable media device, a cross-transport authentication request from the authentication device, the cross-transport authentication request including a first identifier for the authentication device;

authenticating, by the portable media device, the authentication device;

granting, by the portable media device, a set of permissions to the first port;

receiving, by the portable media device from the accessory, a second identifier associated with the accessory;

determining, by the portable media device, whether the second identifier matches the first identifier; and

if the second identifier matches the first identifier, transferring, by the portable media device, at least a sub-set of permissions from the set of permissions to the second port.

17. The method of claim 16 further comprising:

receiving, by the portable media device, a third identifier for a second accessory coupled with a third port of the portable media device;

granting, by the portable media device, at least the sub-set of permissions to the third port if the third identifier matches the first identifier.

18. The method of claim 16 wherein the second port and the third port are wireless ports.

19. An authentication device comprising:

a processor;

a storage device configured to store a private key associated with the authentication device;

a communication interface coupled to the processor and the storage device,

wherein the authentication device is configured to;

couple with a portable media device via a first port of the portable media device;

send a device identifier associated with the authentication controller to the portable media device;

communicate with the portable media device to determine that the portable media device supports cross-transport authentication;

send a cross-transport authentication request to the portable media device to authenticate an accessory coupled to a second port of the portable media device; and

communicate with the portable media device to authenticate itself.

20. The authentication device of claim 19 wherein the authentication device is implemented in a single integrated circuit.

21. The authentication device if claim 19 wherein the authentication device enters a low power state upon authentication with the portable media device.