Management of multiple connections to a security token access device

• US 8,839,398 B2
• Filed: 01/16/2012
• Issued: 09/16/2014
• Est. Priority Date: 07/17/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil Patrick, Little, Herbert Anthony
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): VICTORIA, NARCISO F
• Application Number:
  US13/351,049
• Publication Number:
  US 20120117637A1
• Time in Patent Office: 974 Days
• Field of Search: 726/9
• US Class Current: 726/9
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A security token access device, a user device such as a computing device or communications device, and a method for managing multiple connections between multiple user devices and the access device. The access device maintains connection information, including security information, for each user device securely paired with the access device. Each time a new user device is paired with the access device, the access device transmits a notification to the user devices already paired to the user device. A user may provide instructions to the access device to terminate a pairing with one of the user devices by overwriting at least a portion of the connection information associated with the designated user device. A user device may further request a listing of all user devices currently paired with the access device.

Claims

1. A method implemented at a first device capable of wireless communication, the method comprising:

entering into a wireless pairing with a communication device;

entering an inactivated state while still wirelessly paired with the communication device;

the first device reactivating in response to user input received at the first device, and after reactivating, receiving from the communication device an identification of any other devices that entered into a pairing with the communication device while the first device was in the inactivated state; and

the first device providing, based on the received identification, a notification that the any other devices entered into a pairing with the communication device while the first device was in the inactivated state;

wherein the first device transmits an indication to the communication device that the first device is ready to receive data upon said reactivating, and the first device receives said identification in response to said indication that the first device is ready to receive data.

2. The method of claim 1, wherein said notification comprises a visual display.

3. The method of claim 1, wherein said notification is provided by the first device prior to the first device responding to user commands.

4. The method of claim 1, wherein the inactivated state comprises a locked state.

5. The method of claim 1, wherein the first device comprises a mobile device.

6. The method of claim 1, wherein the first device comprises a smartphone.

7. The method of claim 1, wherein the communication device is capable of at least one of data communication and voice communication.

8. The method of claim 1, wherein each of the one or more other devices enter into a wireless pairing with the communication device.

9. The method of claim 1, wherein the wireless pairing of the first device with the communication device comprises a Bluetooth pairing.

11. The electronic device of claim 9, wherein said notification is provided via a display of the electronic device.

12. The electronic device of claim 9, wherein the microprocessor provides said notification prior to the electronic device responding to user commands.

10. An electronic device, comprising:

a wireless communication subsystem; and

a microprocessor in communication with the wireless communication subsystem, the microprocessor being capable of;

using the wireless communication subsystem, entering into a wireless pairing with a communication device;

placing the electronic device in an inactivated state while still wirelessly paired with the communication device;

reactivating the electronic device in response to user input received at the electronic device;

after reactivating the electronic device, receiving from the communication device, using the wireless communication subsystem, an identification of any other devices that entered into a pairing with the communication device while the electronic device was in the inactivated state;

providing, based on the received identification, a notification that the any other devices entered into a pairing with the communication device while the electronic device was in the inactivated state; and

transmitting, using the wireless communication subsystem, an indication to the communication device that the electronic device is ready to receive data upon said reactivating, and receiving said identification in response to said indication that the electronic device is ready to receive data.

13. The electronic device of claim 10, wherein the inactivated state comprises a locked state.

14. The electronic device of claim 10, wherein the electronic device comprises a mobile device.

15. The electronic device of claim 10, wherein the electronic device comprises a smartphone.

16. The electronic device of claim 10, wherein the electronic device is capable of both data and voice communication.

17. The electronic device of claim 10, wherein the wireless pairing of the electronic device with the communication device comprises a Bluetooth pairing.

18. A method implemented at a communication device capable of wireless communication, the method comprising:

entering into a wireless pairing with a first device;

subsequent to entering into the wireless pairing with the first device, entering into one or more other pairings with one or more other devices;

transmitting to the first device an identification of the one or more other devices that entered into the one or more other pairings subsequent to the wireless pairing, where said one or more other pairings occurred while the first device was in an inactivated state and the communication device was still wirelessly paired with the first device, said transmitting occurring once the first device is reactivated in response to user input received at the first device, the first device providing, based on the transmitted identification, a notification that the one or more other devices entered into the one or more other pairings subsequent to the wireless pairing;

wherein said transmitting occurs in response to an indication received from the first device that the first device is ready to receive data.

19. The method of claim 18, wherein the communication device comprises a mobile device.

20. The method of claim 18, wherein the communication device comprises a security token access device.

21. The method of claim 18, wherein the communication device is capable of at least one of data communication and voice communication.

22. The method of claim 18, wherein the wireless pairing comprises a Bluetooth pairing.

23. The method of claim 18, wherein the one or more other pairings comprise wireless pairings.

24. A communication device, comprising:

a wireless communication subsystem; and

a microprocessor in communication with the wireless communication subsystem, the microprocessor being capable of;

using the wireless communication subsystem, entering into a wireless pairing with a first device;

subsequent to entering into the wireless pairing with the first device, entering into one or more other pairings with one or more other devices;

transmitting, using the wireless communication subsystem, to the first device an identification of the one or more other devices that entered into the one or more other pairings subsequent to the wireless pairing, where said one or more other pairings occurred while the first device was in an inactivated state and the communication device was still wirelessly paired with the first device, said transmitting occurring once the first device is reactivated in response to user input received at the first device, the first device providing, based on the transmitted identification, a notification that the one or more other devices entered into the one or more other pairings subsequent to the wireless pairing;

wherein said transmitting occurs in response to an indication received from the first device that the first device is ready to receive data.

25. The communication device of claim 24, wherein the communication device comprises a mobile device.

26. The communication device of claim 24, wherein the communication device comprises a security token access device.

27. The communication device of claim 24, wherein the communication device is capable of at least one of data communication and voice communication.

28. The communication device of claim 24, wherein the wireless pairing comprises a Bluetooth pairing.

29. The communication device of claim 24, wherein the one or more other pairings comprise wireless pairings.