System and Method for Establishing a Communication Session

• US 20140197232A1
• Filed: 03/30/2012
• Published: 07/17/2014
• Est. Priority Date: 03/31/2011
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Mobile Communications AB (Sony Group Corp.)
• Inventors: Birkler, Paul Joergen, Fedosov, Anton, Blattman, Jeffrey, Rein, Richard Walter Jr.
• Granted Patent: US 9,276,921 B2
• Time in Patent Office: Days
• US Class Current: 235/375
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04M 1/2755 by optical scanning
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A server in a communications network establishes a communication channel between a user'"'"'s device and another device having a display. Particularly, the server generates a Quick Response (QR) code utilizing one or more parameters, and sends it to a device for display to a user. Using his or her device, the user captures an image of the displayed QR code and extracts the parameters using an image analysis technique. The device then sends the extracted parameters back to the server, which then utilizes them to authenticate the user and establish the communications session.

Claims

1. A method for establishing a communications session between first and second devices, the method performed at a network server and comprising:

generating a coded image for display at a first device connected to the network server, the coded image including embedded data used to authenticate a second device at the network server;

sending the coded image to the first device for display to the second device;

receiving, from the second device, the embedded data extracted from the displayed coded image by the second device; and

authenticating the second device to perform one or more protected functions based on the received embedded data.

2. The method of claim 1 wherein generating the coded image comprises generating a 2-dimensional or 3-dimensional bar code for display at the first device.

3. The method of claim 1 wherein generating the coded image comprises selecting an image from a predetermined pool of images for display at the first device.

4. The method of claim 1 wherein generating the coded image comprises:

generating a pattern of one or more colors, each color having an assigned luminescence value that identifies a selected level of luminescence for the color; and

configuring the pattern to change one or more of the colors and/or one or more of the luminescence values in a pre-defined order while the coded image is displayed at the first device.

5. The method of claim 1 wherein generating a coded image for display at the first device comprises generating the coded image responsive to receiving a request for the coded image from the first device.

6. The method of claim 1 wherein receiving the embedded data comprises receiving the embedded data in an authentication request, from the second device, to communicate with the first device.

7. The method of claim 6 wherein authenticating the second device based on the received embedded data comprises:

comparing the embedded data received in the authentication request to the embedded data used to generate the coded image at the network server; and

authorizing the second device to perform the one or more protected functions based on a result of the comparison.

8. The method of claim 1 wherein, based on the authentication result, the method further comprises:

establishing a data channel between the first and second devices to communicate data from the second device to the first device; and

establishing a control channel between the first and second devices to communicate control commands from the second device to the first device to allow the second device to control rendering the data at the first device.

9. The method of claim 8 wherein establishing a communications link between the first and second devices comprises establishing one or both of the control channel and the data channel between the first and second devices via the network server.

10. The method of claim 8 further comprising:

receiving an indication of whether the first and second devices were able to directly establish one or both of the control channel and the data channel; and

establishing the control channel and/or the data channel between the first and second devices via the network server based on the received indication.

11. The method of claim 1 further comprising:

generating another coded image for display at a third device connected to the network server, the coded image including embedded data used to authenticate a fourth device at the network server;

sending the coded image to the third device for display to the fourth device;

receiving, from the fourth device, the embedded data extracted from the displayed coded image by the fourth device; and

authenticating the fourth device based on the received embedded data.

12. The method of claim 11 further comprising:

establishing a data channel between the second and third devices to communicate data from the second device to the third device;

establishing a control channel between the second and third devices to communicate control commands from the second device to the third device to allow the second device to control rendering the data at the third device.

13. A network server and comprising:

a communications interface to communicate with a user device and a display device via a communications network;

a memory; and

a programmable controller configured to;

generate a coded image for display at the display device, the coded image including embedded data used to authenticate the user device at the network server;

send the coded image to the display device for display to the user device;

receive, from the user device, the embedded data extracted from the displayed coded image by the user device; and

authenticate the user device to perform one or more protected functions based on the received embedded data.

14. The network server of claim 13 wherein the coded image comprises a 2-dimensional or 3-dimensional bar code for display at the first device.

15. The network server of claim 13 wherein the coded image comprises an image selected from a predetermined pool of images stored in the memory.

16. The network server of claim 13 wherein the coded image comprises a pattern of one or more colors, each color having an assigned luminescence value that identifies a selected level of luminescence for the color, and wherein the controller is further configured to generate the pattern to change one or more of the colors and/or one or more of the luminescence values in a pre-defined order while the coded image is displayed at the display device.

17. The network server of claim 13 wherein the controller is further configured to generate the coded image responsive to receiving a request for the coded image from the display device.

18. The network server of claim 17 wherein the controller is further configured to receive the embedded data from the user device in an authentication request to communicate with the display device.

19. The network server of claim 17 wherein the controller is further configured to:

compare the embedded data received in the authentication request to the embedded data used to generate the coded image; and

authorize the user device to perform the one or more protected functions based on a result of the comparison.

20. The network server of claim 13 wherein, based on the authentication result, the controller is further configured to:

establish a data channel between the user device and the display device to communicate data from the user device to the display device; and

establish a control channel between the user device and the display device to communicate control commands from the user device to the display device to allow the user device to control rendering the data at the display device.

21. The network server of claim 20 the controller is further configured to establish one or both of the control channel and the data channel between the first and second devices via the network server.

22. The network server of claim 20 wherein the controller is further configured to:

receive an indication of whether the user device and the display device were able to directly establish one or both of the control channel and the data channel; and

establish the control channel and/or the data channel between the user device and the display device via the network server based on the received indication.

23. The network server of claim 13 wherein the user device and the display device comprise a local user device and a local display device, and wherein the controller is further configured to:

generate a second coded image for display at a remote display device connected to the network server, the second coded image including embedded data used to authenticate a remote user device at the network server;

sending the second coded image to the remote display device for display to the remote user device;

receiving, from the remote user device, the embedded data extracted from the displayed second coded image by the remote user device; and

authenticating the remote user device based on the received embedded data.

24. The network server of claim 23 wherein the controller is further configured to:

establish a data channel between the local user device and the remote display device to communicate data from the local user device to the remote display device;

establish a control channel between the local user device and the remote display device to communicate control commands from the local user device to the remote display device to allow the local user device to control rendering the data by the remote display device.