DEVICE ASSOCIATION VIA VIDEO HANDSHAKE

• US 20130125224A1
• Filed: 11/10/2011
• Published: 05/16/2013
• Est. Priority Date: 11/10/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Skype Limited (Microsoft Corporation)
• Inventors: KAUFMAN, MATTHEW
• Granted Patent: US 9,288,229 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

A method of pairing a first device with a second device is disclosed. Accordingly, an image that include encoded data is generated by the first device. The encoded data includes a unique identifier for identifying the first device and an arbitrary security code. The first device displays the image on a display. The second device captures the image using an image sensing device. The encoded data is decoded to generate a decoded data. The second device sends the decoded data to a server that is communicatively connected to the first device and the second device. Upon receiving the decoded data and using the unique identifier, the server communicates with the first device to verify the arbitrary security code.

Claims

1. A method of pairing a first device with a second device, the method comprising:

generating, by the first device, an image that includes a unique identifier for identifying the first device and a security code;

displaying the image on a display of the first device;

capturing the image by the second device using an image sensing device; and

sending the unique identifier and the security code to a server that is communicatively connected to the first device and the second device, and requesting the server to communicate with the first device, using the unique identifier, to verify the security code.

2. The method of claim 1, wherein the unique identifier and the security code in the image are in an obfuscated form and the unique identifier and the security code are decoded by the second device or the server.

3. The method of claim 2, wherein at a time of the sending, the second device is in an active communication session with a third device.

4. The method of claim 3, wherein, the active communication session includes an audio-visual communication.

5. The method of claim 4, wherein, upon verifying the security code and according to a preference of a user of the second device, the server transfers at least a part of the active communication session from the second device to the first device.

6. The method of claim 5, wherein, if only a part of the active communication session is transferred to the first device, the remaining active communication session runs concurrently and synchronously on the second device.

7. The method of claim 5, wherein, prior to the transfer, the server generates an authentication certificate corresponding to a user of the second device and sends the authentication certificate to the first device.

8. The method of claim 4, wherein, the transfer of the at least a part of the active communication session includes setting up a session between the first device and the third device.

9. A system for pairing a first device with a second device, comprising:

a first device connected to a network, the first device is configured to generate an image that includes a unique identifier for identifying the first device and a security code, and to display the image on a display of the first device; and

a second device connected to the network, the second device is configured to capture the image and to retrieve the unique identifier and the security code, and to send the unique identifier and the security code to a server that is communicatively connected to the first device and the second device, wherein the server is connected to the first device and the second device through the network and the server is configured to communicate, using the unique identifier, with the first device to verify the security code.

10. The system of claim 9, wherein the first device is further configured to obfuscate the unique identifier and the security code in the image, the second device or the server is further configured to decode the unique identifier and the security code from the obfuscated form.

11. The system of claim 10, further comprising a third device connected to the network and in an active communication with the second, the active communication session includes an audio-visual communication.

12. The system of claim 11, wherein, the server is configured to transfer at least a part of the active communication session from the second device to the first device, upon verifying the security code and according to a preference of a user of the second device.

13. The system of claim 12, wherein, the server is configured such that if only a part of the active communication session is transferred to the first device, the remaining communication session runs concurrently and synchronously on the second device.

14. The system of claim 12, wherein, the server is configured to generate an authentication certificate corresponding to a user of the second device and to send the authentication certificate to the first device, prior to the transfer.

15. The system of claim 11, wherein, the transfer of the at least a part of the active communication session includes setting up a session between the first device and the third device.

16. A computer readable storage medium containing a program which, when executed, performs an operation of pairing devices, the operation comprising:

capturing an image using an image sensor, wherein the image includes a unique identifier of another device and a security code; and

sending the unique identifier and the security code to a server via a network and instructing the server to communicate with the another device using the unique identifier to verify the security code with the another device.

17. The computer readable storage medium of claim 16, wherein the operation further includes decoding the unique identifier and the security code in the image if the image includes the unique identifier and the security code in an obfuscated form.

18. The computer readable storage medium of claim 17, wherein the operation further including determining if at a time of the sending, the second device is in an active communication session with a third device, the active communication session includes an audio-visual communication.

19. The computer readable storage medium of claim 18, wherein the operation further includes transferring at least a part of the active communication session from the second device to the first device after verifying the security code and according to a preference of a user of the second device.

20. The computer readable storage medium of claim 19, wherein, in the operation, if only a part of the active communication session is transferred to the first device, the remaining active communication session runs concurrently and synchronously on the second device.

21. The computer readable storage medium of claim 19, wherein, the operation further including generating an authentication certificate corresponding to a user of the second device and sending the authentication certificate to the first device, prior to the transferring.