SELECTIVE ADMISSION INTO A NETWORK SHARING SESSION

• US 20120311165A1
• Filed: 06/01/2011
• Published: 12/06/2012
• Est. Priority Date: 06/01/2011
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Renschler, Martin H., Kim, Frederick D., Lundqvist, Patrik N.
• Granted Patent: US 10,681,021 B2
• Time in Patent Office: Days
• US Class Current: 709/228
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A system and method provide for the selective authorization and admission of a client into a data sharing session with a host. A host may select one or more clients into the sharing session based on the proximity of the clients. When a client is selected, an identifier is provided from the client device to the host device, for example, utilizing an optical identifier such as a bar code or an audible identifier such as an encoded sound. The identifier is then utilized to establish a link between the client and the host. In this fashion any number of client devices may be selectively admitted into the sharing session in a quick and easy process enabling security for the host and anonymity for the client.

Claims

1. A method of selective authorization, comprising:

determining to admit a client device into a network sharing session with a host device;

detecting that the client device is proximate to the host device;

receiving an identifier from the admitted client device for identifying the admitted client device; and

establishing the network sharing session utilizing the identifier.

2. The method of claim 1, wherein the receiving of the identifier comprises receiving a visual image at the host device from the admitted client device.

3. The method of claim 2, further comprising orienting an image sensor coupled to the host device to facilitate the receiving of the visual image from the admitted client device.

4. The method of claim 2, wherein the visual image comprises a displayed image provided on a video display device coupled to the admitted client device.

5. The method of claim 2, wherein the visual image comprises an image affixed to the admitted client device.

6. The method of claim 5, wherein the image affixed to the admitted client device comprises a sticker.

7. The method of claim 2, wherein the visual image comprises at least one of a bar code, a QR code, a data matrix code, or a predetermined image.

8. The method of claim 1, wherein the receiving of the identifier comprises receiving an audio signal emitted by an audio emitter coupled to the admitted client device.

9. The method of claim 8, wherein the audio signal comprises one or more encoded audio tones.

10. The method of claim 8, further comprising orienting an audio sensor coupled to the host device to facilitate the receiving of the audio signal from the audio emitter coupled to the admitted client device.

11. The method of claim 1, wherein the identifier comprises sufficient information to establish communication with the admitted client device.

12. The method of claim 11, wherein the identifier comprises one or more of:

a code or name identifying a technology to utilize for the sharing session, an identification of one or more physical channels monitored by the admitted client device, a MAC ID of the first device, or IP/Port address information for the admitted client device.

13. The method of claim 11, further comprising establishing a link with the admitted client device utilizing the information included in the identifier provided by the admitted client device.

14. The method of claim 1, further comprising:

establishing a network connection with a server;

providing information corresponding to the identifier to the server;

receiving information from the server to enable an establishment of communication with the admitted client device; and

establishing a link with the admitted client device utilizing the information from the server.

15. The method of claim 1, further comprising:

receiving a public key from the admitted client device; and

encrypting information to be broadcast, utilizing the public key, such that the encrypted information is configured to be decrypted utilizing a private key corresponding to the public key.

16. The method of claim 15, wherein the identifier is the public key.

17. The method of claim 15, further comprising:

broadcasting the encrypted information over a broadcast channel.

18. A method of joining a network sharing session with a host device, comprising:

providing, from an admitted client device admitted into the sharing session, an identifier for identifying the admitted client device to the host device; and

establishing a link with the host device for communication over the sharing session.

19. The method of claim 18, wherein the providing of the identifier comprises displaying a visual image on the admitted client device.

20. The method of claim 19, further comprising orienting the admitted client device such that the visual image is visible to an image sensor coupled to the host device to facilitate the providing of the visual image from the admitted client device.

21. The method of claim 19, wherein the displaying of the visual image comprises providing the visual image on a video display device coupled to the admitted client device.

22. The method of claim 19, wherein the displaying of the visual image comprises displaying an image affixed to the admitted client device.

23. The method of claim 22, wherein the image affixed to the admitted client device comprises a sticker.

24. The method of claim 18, wherein the providing of the identifier comprises emitting an audio signal from an audio emitter coupled to the admitted client device.

25. The method of claim 24, wherein the audio signal comprises one or more encoded audio tones.

26. The method of claim 24, further comprising positioning the audio emitter such that the audio signal is audible to an audio sensor coupled to the host device to facilitate the providing of the audio signal from the admitted client device.

27. The method of claim 18, wherein the identifier comprises sufficient information for the host device to establish communication with the admitted client device.

28. The method of claim 27, wherein the identifier comprises one or more of:

a code or name identifying a technology to utilize for the sharing session, an identification of one or more physical channels monitored by the admitted client device, a MAC ID of the first device, or IP/Port address information for the admitted client device.

29. The method of claim 18, further comprising:

establishing a network connection with a server; and

providing information corresponding to the identifier to the server.

30. The method of claim 18, further comprising:

determining a public key corresponding to a private key stored in the admitted client device;

providing the public key to the host device;

receiving encrypted information from the host device; and

decrypting the encrypted information utilizing the private key.

31. An apparatus for selective authorization, comprising:

a processor; and

a memory coupled to the processor,

wherein the processor is configured to;

determine to admit a client device into a network sharing session with a host device;

detect that the client device is proximate to the host device;

receive an identifier from the admitted client device for identifying the admitted client device; and

establish the network sharing session utilizing the identifier.

32. The apparatus of claim 31, wherein the receiving of the identifier comprises receiving a visual image at the host device from the admitted client device.

33. The apparatus of claim 32, wherein the processor is further configured to orient an image sensor coupled to the host device to facilitate the receiving of the visual image from the admitted client device.

34. The apparatus of claim 32, wherein the visual image comprises a displayed image provided on a video display device coupled to the admitted client device.

35. The apparatus of claim 32, wherein the visual image comprises an image affixed to the admitted client device.

36. The apparatus of claim 35, wherein the image affixed to the admitted client device comprises a sticker.

37. The apparatus of claim 32, wherein the visual image comprises at least one of a bar code, a QR code, a data matrix code, or a predetermined image.

38. The apparatus of claim 31, wherein the receiving of the identifier comprises receiving an audio signal emitted by an audio emitter coupled to the admitted client device.

39. The apparatus of claim 38, wherein the audio signal comprises one or more encoded audio tones.

40. The apparatus of claim 38, wherein the processor is further configured to orient an audio sensor coupled to the host device to facilitate the receiving of the audio signal from the audio emitter coupled to the admitted client device.

41. The apparatus of claim 31, wherein the identifier comprises sufficient information to establish communication with the admitted client device.

42. The apparatus of claim 41, wherein the identifier comprises one or more of:

a code or name identifying a technology to utilize for the sharing session, an identification of one or more physical channels monitored by the admitted client device, a MAC ID of the first device, or IP/Port address information for the admitted client device.

43. The apparatus of claim 41, wherein the processor is further configured to establish a link with the admitted client device utilizing the information included in the identifier provided by the admitted client device.

44. The apparatus of claim 31, wherein the processor is further configured to:

establish a network connection with a server;

provide information corresponding to the identifier to the server;

receive information from the server to enable an establishment of communication with the admitted client device; and

establish a link with the admitted client device utilizing the information from the server.

45. The apparatus of claim 31, wherein the processor is further configured to:

receive a public key from the admitted client device; and

encrypt information to be broadcast, utilizing the public key, such that the encrypted information is configured to be decrypted utilizing a private key corresponding to the public key.

46. The apparatus of claim 45, wherein the identifier is the public key.

47. The apparatus of claim 45, wherein the processor is further configured to:

broadcast the encrypted information over a broadcast channel.

48. An apparatus for joining a network sharing session with a host device, comprising:

a processor; and

a memory coupled to the processor,

wherein the processor is configured to;

provide, from an admitted client device admitted into the sharing session, an identifier for identifying the admitted client device to the host device; and

establish a link with the host device for communication over the sharing session.

49. The apparatus of claim 48, wherein the providing of the identifier comprises displaying a visual image on the admitted client device.

50. The apparatus of claim 49, wherein the processor is further configured to orient the admitted client device such that the visual image is visible to an image sensor coupled to the host device to facilitate the providing of the visual image from the admitted client device.

51. The apparatus of claim 49, wherein the displaying of the visual image comprises providing the visual image on a video display device coupled to the admitted client device.

52. The apparatus of claim 49, wherein the displaying of the visual image comprises displaying an image affixed to the admitted client device.

53. The apparatus of claim 52, wherein the image affixed to the admitted client device comprises a sticker.

54. The apparatus of claim 48, wherein the providing of the identifier comprises emitting an audio signal from an audio emitter coupled to the admitted client device.

55. The apparatus of claim 54, wherein the audio signal comprises one or more encoded audio tones.

56. The apparatus of claim 54, wherein the processor is further configured to position the audio emitter such that the audio signal is audible to an audio sensor coupled to the host device to facilitate the providing of the audio signal from the admitted client device.

57. The apparatus of claim 48, wherein the identifier comprises sufficient information for the host device to establish communication with the admitted client device.

58. The apparatus of claim 57, wherein the identifier comprises one or more of:

a code or name identifying a technology to utilize for the sharing session, an identification of one or more physical channels monitored by the admitted client device, a MAC ID of the first device, or IP/Port address information for the admitted client device.

59. The apparatus of claim 48, wherein the processor is further configured to:

establish a network connection with a server; and

provide information corresponding to the identifier to the server.

60. The apparatus of claim 48, wherein the processor is further configured to:

determine a public key corresponding to a private key stored in the admitted client device;

provide the public key to the host device;

receive encrypted information from the host device; and

decrypt the encrypted information utilizing the private key.

61. An apparatus for selective authorization, comprising:

means for determining to admit a client device into a network sharing session with a host device;

means for detecting that the client device is proximate to the host device;

means for receiving an identifier from the admitted client device for identifying the admitted client device; and

means for establishing the network sharing session utilizing the identifier.

62. An apparatus for joining a network sharing session with a host device, comprising:

means for providing, from an admitted client device admitted into the sharing session, an identifier for identifying the admitted client device to the host device; and

means for establishing a link with the host device for communication over the sharing session.

63. A computer program product, comprising:

a computer-readable medium comprising;

instructions for causing a computer to determine to admit a client device into a network sharing session with a host device;

instructions for causing a computer to detect that the client device is proximate to the host device;

instructions for causing a computer to receive an identifier from the admitted client device for identifying the admitted client device; and

instructions for causing a computer to establish the network sharing session utilizing the identifier.

64. A computer program product, comprising:

a computer-readable medium comprising;

instructions for causing a computer to provide, from an admitted client device admitted into a sharing session, an identifier for identifying the admitted client device to a host device hosting the sharing session; and

instructions for causing a computer to establish a link with the host device for communication over the sharing session.