System and method for controlling access between Bluetooth devices

• US 8,654,977 B2
• Filed: 11/25/2010
• Issued: 02/18/2014
• Est. Priority Date: 11/25/2010
• Status: Active Grant

• Current Assignee: Psion PLC (Motorola Solutions, Inc.)
• Original Assignee: Psion PLC (Motorola Solutions, Inc.)
• Inventors: Lee, Reo, Vardeh, Eil Beron Meghdies
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US12/954,650
• Publication Number:
  US 20120137346A1
• Time in Patent Office: 1,181 Days
• Field of Search: 726/4, 726/2, 726/29, 380/270, 713/183, 713/184
• US Class Current: 380/270
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and system is provided for using an access list stored on a memory of a first computing device, the access list for controlling communication between the first computing device and a plurality of computing devices in a Bluetooth communication network. The method comprises: initiating a restricted mode of operation on the first computing device, the restricted mode of operation configured to secure the access list to prevent subsequent unauthorized modification thereon, the access list including at least one entry representing at least one selected computing device of the plurality of computing devices being permitted to access the first computing device, the at least one entry comprising at least one identifier to identify the at least one selected computing device; in response to a connection request between the first computing device and a particular computing device of the plurality of computing devices, determining whether the particular computing device is on the access list; and preventing connection between the first computing device to the particular computing device in response to determining that the particular computing device is not on the access list.

Claims

1. A method of using an access list stored on a memory of a first computing device, the access list for controlling communication between the first computing device and a plurality of computing devices in a Bluetooth communication network, the method comprising:

initiating a discovery request at the first computing device such that the discovery request is targeted to at least one of the plurality of computing devices;

generating a list of discoverable computing devices from the plurality of computing devices available for communication with the first computing device in response to the discovery request;

pairing the first computing device to a discovered computing device;

assigning the discovered computing device to the access list;

initiating a restricted mode of operation on the first computing device, the restricted mode of operation configured to secure the access list to prevent subsequent unauthorized modification thereof, the access list including an entry representing the discovered computing device of the plurality of computing devices that is permitted to access the first computing device, the entry comprising at least one identifier to identify the discovered computing device;

in response to a connection request between the first computing device and a particular computing device of the plurality of computing devices, determining whether the particular computing device is on the access list; and

preventing connection between the first computing device and the particular computing device in response to determining that the particular computing device is not on the access list.

2. The method of claim 1, further comprising preventing subsequent discovery requests from the first computing device in response to initiating the restricted mode of operation.

3. The method of claim 1, wherein the at least one identifier is selected from the group consisting of:

IP address, MAC address, serial number, and Bluetooth address.

4. The method of claim 1, wherein the access list is defined on the first computing device via a user interface.

5. The method of claim 1, wherein the access list is provided to the first computing device from a second computing device.

6. The method of claim 1, wherein, upon initiating the restricted mode of operation, preventing connection further comprises terminating an existing connection between the first computing device and the particular computing device when the particular computing device is not on the access list.

7. The method of claim 1, wherein preventing connection between the first computing device and the particular computing device is further in response to determining that the first computing device is not on a second access list associated with the particular computing device.

8. The method of claim 1, wherein a connection request is initiated on the first computing device.

9. The method of claim 1, wherein a connection request is initiated on the particular computing device.

10. The method of claim 1, wherein the restricted mode of operation is controlled via a password stored on the memory of the first computing device.

11. The method of claim 1, further comprising disabling modification of preselected services provided by the first computing device to the discovered computing device in response to the initiated restricted mode of operation.

12. The method of claim 5, further comprising defining the access list on the second computing device by receiving user input providing the at least one identifier to identify the discovered computing device for the at least one entry.

13. The method of claim 12, wherein the at least one identifier is selected from the group consisting of:

IP address, MAC address, serial number, and Bluetooth address.

14. The method of claim 13, wherein the second computing device is a non-Bluetooth device.

15. A first computing device comprising:

a processor;

a memory coupled to the processor, the memory configured to store an access list for controlling communication between the first computing device and a plurality of computing devices in a Bluetooth communication network, the memory coupled to the processor having instructions stored thereon for execution by the processor, the memory comprising instructions for;

initiating a discovery request at the first computing device such that the discovery request is targeted to at least one of the plurality of computing devices;

generating a list of discoverable computing devices from the plurality of computing devices available for communication with the first computing device in response to the discovery request;

pairing the first computing device to a discovered computing device;

assigning the discovered computing device to the access list;

initiating a restricted mode of operation on the first computing device, the restricted mode of operation configured to secure the access list to prevent subsequent unauthorized modification thereof, the access list including an entry representing the discovered computing device of the plurality of computing devices that is permitted to access the first computing device, the entry comprising at least one identifier to identify the discovered computing device;

in response to a connection request between the first computing device and a particular computing device of the plurality of computing devices, determining whether the particular computing device is on the access list; and

preventing connection between the first computing device to the particular computing device in response to determining that the particular computing device is not on the access list.

16. The computing device of claim 15, wherein the memory further comprises instruction for:

preventing subsequent discovery requests from the first computing device in response to initiating the restricted mode of operation.

17. The computing device of claim 15, wherein the at least one identifier is selected from the group consisting of:

IP address, MAC address, serial number, and Bluetooth address.

18. The computing device of claim 15, further comprising a user interface for defining the access list.

19. The computing device of claim 15, wherein the memory further comprises instructions for terminating an existing connection between the first computing device and the particular computing device when the particular computing device is not on the access list during the restricted mode of operation.

20. The computing device of claim 15, wherein the memory comprises instructions for preventing connection between the first computing device and the particular computing device is further in response to determining that the first computing device is not on a second access list associated with the particular computing device.