METHOD FOR THE DISCOVERY AND SECURE ACCESS TO MOBILE DEVICES IN PROXIMITY BY MEANS OF THE USE OF A VISUAL CHANNEL

• US 20120324553A1
• Filed: 11/25/2010
• Published: 12/20/2012
• Est. Priority Date: 11/26/2009
• Status: Abandoned Application

• Current Assignee: Telefonica SA
• Original Assignee: Telefonica SA
• Inventors: Garcia Bernardo, Gustavo, Martinez Alvarez, Javier
• Application Number:
  US13/512,253
• Publication Number:
  US 20120324553A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2463/081 applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04W 12/08 Access security

Abstract

Disclosed is a method for the secure access of a mobile device to a nearby client device that includes the following:

1. the mobile device generating, at the time of receiving a determined stimulus, a code comprising security credentials and a contact address in a server;

2. representing the code and address in the screen of the mobile device;

3. the client device detecting and extracting the represented information;

4. the client device connecting to the contact address using the credentials;

5. the client obtaining the information contained in the contact address.

By applying the method the server device can indicate the mode of access to the contents or services associated with the device, both if they are offered directly from the device itself and if they are offered from another external element.

Claims

1. A method for the secure access of a mobile device to a nearby client device, wherein the mobile device is provided with a screen, memory and storage means and the client device is provided with image capture and detection means, and the method comprising:

a. the mobile device generating, at the time of receiving a determined stimulus, a code comprising security credentials and a contact address;

b. representing said code and address in the screen of the mobile device;

c. the client device detecting and extracting the represented information;

d. the client device connecting to the contact address using said credentials, wherein the contact address may be an address of an external server or an address of the mobile device;

e. if the contact address is that of an external server, the external server will send a notification to the mobile device including the credentials for their verification, the mobile device will verify if the credentials are valid and it will inform the user of the mobile device, the user will accept or cancel the transfer of information and said decision will be communicated to the external server;

f. if the contact address is that of the mobile device, the mobile device will verify the credentials and it will accept the transfer of information if the result of the verification is positive; and

g. the client device obtaining information contained in a device associated with the contact address in the event of having been accepted.

2. A method according to claim 1, wherein the code is in text form.

3. A method according to claim 1, wherein the code is a QR code.

4. A method according to any of the previous claims, wherein the mobile device has an accelerometer and the stimulus is a movement of the mobile device.

5. A method according to claim 1, wherein the stimulus is the activation of a key of the mobile device by a user.

6. A method according to claim 1, wherein the code has a limited life and is regenerated after each use.

7. A method according to claim 1, wherein in step f, said verification of credentials further includes an explicit acceptation of the user of the mobile device.

8. A method for the secure access of a mobile device to a nearby client device, wherein the mobile device is provided with a screen, memory and storage means and the client device is provided with image capture and detection means, the method comprising:

the client device detecting and extracting represented information appearing on the screen of the mobile device from the screen of the portable device, the represented information including a code comprising security credentials and a contact address;

the client device connecting to a device associated with the contact address using said security credentials, wherein the contact address may be an address of an external server or an address of the mobile device; and

the client device obtaining the information from one of devices associated with the contact address after verification by the mobile device.