Cross-transport authentication

• US 8,238,811 B2
• Filed: 01/07/2009
• Issued: 08/07/2012
• Est. Priority Date: 09/08/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Lydon, Gregory T.
• Primary Examiner(s): Ajibade Akonai, Olumide T
• Assistant Examiner(s): Peaches, Randy
• Application Number:
  US12/349,984
• Publication Number:
  US 20100173673A1
• Time in Patent Office: 1,308 Days
• Field of Search: 455/557, 455/575.6, 455/575.1
• US Class Current: 455/3.03
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

An authentication controller coupled to a first communication port of a portable media device is allowed to provide authentication on behalf of an accessory device coupled to a second communication port of the portable media device. In one embodiment, a cross transport connector includes a connector configured to couple with an accessory and a connector configured to couple with a portable media device such that the accessory can be coupled to the second communication port of the portable media device. The cross-transport connector also includes an authentication controller. The authentication controller may request authentication from the media device over the first communication port of the portable media device. The request may also include an identifier of the second port, to which authenticated permissions obtained via the first port may be transferred.

Claims

1. A method for authentication of an accessory device at a portable media device communicatively coupled with the accessory device, the method comprising, by the portable media device:

receiving a cross-transport authentication request via a first port, wherein the cross-transport authentication request specifies a second port as a destination port for which cross-transport authentication is requested, and wherein the portable media device is communicatively coupled with the accessory via the second port;

authenticating the first port, wherein the authentication grants a set of permissions for communication via the first port;

transferring at least a subset of permissions granted to the first port during the authenticating to the second port; and

thereafter, communicating with the accessory through the second port;

receiving an indication that the first port has been disconnected; and

in response to the indication, revoking permissions for the second port and the first port.

2. The method according to claim 1 further comprising:

detecting that the accessory device has been decoupled from the second port; and

in response to the detecting, revoking the permissions from the first port and the second port.

3. The method according to claim 1 further comprising detecting the presence of the accessory device through the second port.

4. The method according to claim 1 further comprising:

receiving a cross-transport authentication request from the accessory device through the second port; and

in the event that the authenticating of the first port is not successful, sending an error message to the accessory device through the second port,

wherein the transferring is performed in response to the cross-transport authentication request.

5. The method according to claim 1, wherein the set of permissions include a permission to invoke one or more commands that control operation of the portable media device.

6. The method according to claim 1 further comprising:

receiving an indication that the accessory has been decoupled from the second port; and

in response to the indication, revoking permissions for the second port.

7. The method according to claim 6 further comprising revoking permissions for the first port in response to the indication.

8. A portable media device comprising:

a multi-transport communication interface configured to exchange commands and data with an accessory, the multi-transport communication interface having a plurality of ports;

control logic coupled to the multi-transport communication interface, the control logic being configured to;

receive a request for cross-transport authentication via a first one of the plurality of ports of the multi-transport communication interface, the request specifying a second one of the ports as a destination port;

perform an authentication operation via the first port; and

in the event that the authentication operation is successful, grant a set of permission to at least the second port;

wherein the control logic is further configured to communicate over the first port and the second port asynchronously relative to each other.

9. The portable media device according to claim 8, wherein the control logic is further configured to:

receive a request for cross-transport authentication through the second port of the multi-transport communication interface ; and

if the authentication is unsuccessful, send an error message to a device connected to the second port.

10. The portable media device according to claim 8, wherein the plurality of ports includes at least one port selected from the group consisting of:

a universal serial bus (USB) port, a serial port, a wireless universal serial bus port;

an EDGE network port, a 3G network port, a phone network port, a FireWire port;

a Wi-Fi port; and

a Bluetooth port.

11. The portable media device according to claim 8, wherein the plurality of ports includes at least one wireless port.

12. The portable media device according to claim 8, wherein the first port comprises an asynchronous serial port and the second port comprises a universal serial bus (USB) port.

13. The portable media device according to claim 8, wherein the control logic is further configured to send a random number to an authentication controller, and wherein the authenticating communication includes control logic configured to:

extract an encoded number from the request;

decrypt the encoded number; and

compare the decrypted number with the random number sent to the authentication controller.

14. The portable media device according to claim 8, wherein the multi-transport communication interface includes a 30-pin connector.

15. A method for authenticating an accessory coupled with a portable media device through a cross-transport connecter, the method comprising:

receiving a first cross-transport authentication request through a first port, the first cross-transport authentication request including an identifier associated with a second port to which permissions are to be transferred;

authenticating the first port;

providing a set of permissions to the first port based on an outcome of authenticating the first port;

receiving a second cross-transport authentication request through the second port, the request including an identifier associated with the first port; and

transferring at least a subset of the set of permissions from the first port to the second port.

16. The method of claim 15 wherein transferring includes revoking the subset of permissions from the first port.

17. The method of claim 15 wherein transferring includes providing the subset of permissions to both the first port and the second port.

18. An accessory for use with a portable media device, the accessory comprising:

an input/output interface configured to exchange commands and data with the portable media device via a first port of the portable media device; and

a controller coupled to the input/output interface, the controller being configured to;

detect a connection of the portable media device to the input/output interface;

request cross-transport authentication of the first port by sending a cross-transport request to the portable media device through the input/output interface, the cross-transport request including identification of a second port of the portable media device to be used as a source of permissions, wherein the permissions are established by an authentication operation on the second port;

receive an indication from the input/output interface that cross-transport authentication for the second port is successful; and

thereafter communicate with the portable media device through the input/output interface and the second port.

19. The accessory according to claim 18, wherein the input/output interface comprises a universal serial bus interface and the second port comprises a universal serial bus port.

20. The accessory according to claim 18 further comprising a user interface, wherein the controller is further configured to receive an indication from the input/output interface that cross-transport authentication of the first port has been denied, and thereafter to provide an indication to a user through the user interface that the authentication has failed.

21. A method for providing cross-transport authentication at an accessory device communicably coupled to a first port of a portable media device, the method comprising:

sending a request for cross-transport authentication to the portable media device via the first port, the request including an identifier associated with a second port of the portable media device that is to be used as a source of permissions, wherein the permissions are established by an authentication operation on the second port;

receiving an indication via the first port that permissions have been granted for communication with the portable media device; and

communicating with the portable media device via the first port.