Device-pairing by reading an address provided in device-readable form

• US 8,966,096 B2
• Filed: 05/06/2013
• Issued: 02/24/2015
• Est. Priority Date: 02/17/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Garcia Jurado Suarez, Carlos, von Veh, Curtis N., Kirovski, Darko, Meek, Christopher A.
• Primary Examiner(s): Osman, Ramy M
• Application Number:
  US13/888,356
• Publication Number:
  US 20130246637A1
• Time in Patent Office: 659 Days
• Field of Search: 709/203, 709/217, 709/223, 709/227, 709/228, 709/225, 709/238, 709/245, 726/12, 726/15
• US Class Current: 709/227
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 61/2592 using tunnelling or encapsulation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04W 76/12 Setup of transport tunnels

Abstract

A system is described for allowing a user, operating a trusted device, to remotely log into a server via a potentially untrustworthy client. A first secure connection is established between the client and the server. A second secure connection is established between the device and the server through the client. The user then remotely logs into the server over the second secure connection using the device. The second secure connection is tunneled within the first secure connection, preventing the untrustworthy client from discovering personal information associated with the user. According to one feature, prior to forming the second secure connection, the user establishes a pairing relationship with the client by reading an address of the client using a reading mechanism. According to another feature, the device can receive marketing information in the course of a transaction.

Claims

1. A computer-implemented method for pairing a device with a client, comprising:

providing an address of the client in a physical device-readable form;

establishing a first secure connection between the client and a server, the client communicating with the server over a network;

establishing a pairing relationship between the client and the device in response to reading of the address by the device; and

establishing a second secure connection between the device and the server through the client, based on the pairing relationship established between the device and the client, the second secure connection being tunneled within the first secure connection.

2. The computer-implemented method of claim 1, wherein the device-readable form is a bar code form.

3. The computer-implemented method of claim 1, wherein the device-readable form comprises an encoding of the address using an electromagnetic transponder.

4. The computer-implemented method of claim 1, wherein the device-readable form comprises a label placed in proximity to the client.

5. The computer-implemented method of claim 4, wherein the label is provided on a housing of the client or on an article associated with the client.

6. The computer-implemented method of claim 4, wherein the label is displayed on a display interface of the client.

7. The computer-implemented method of claim 1, wherein the device communicates with the client via a wireless communication channel.

8. The computer-implemented method of claim 1, wherein the device is a mobile telephone.

9. The computer-implemented method of claim 1, wherein the device is a portable computing device.

10. The computer-implemented method of claim 1, wherein the client is a terminal.

11. The computer-implemented method of claim 1, further comprising conducting a financial transaction involving a purchase, via one or more of the first secure connection or the second secure connection.

12. The computer-implemented method of claim 1, further comprising sending marketing information to the device.

13. The computer-implemented method of claim 12, wherein the marketing information comprises an electronic coupon or an advertisement.

14. The computer-implemented method of claim 1, further comprising receiving user credentials and a device identification code over the second secure connection.

15. A computer-implemented method for conducting a transaction in a merchandising environment, comprising:

providing an address of a client in a physical device-readable form;

establishing a first secure connection between the client and a server, the client communicating with the server over a network;

establishing a pairing relationship between the client and a device in response to reading of the address by the device;

establishing a second secure connection between the device and the server through the client, based on the pairing relationship established between the device and the client, the second secure connection being tunneled within the first secure connection; and

conducting a transaction over the second secure connection,

the client representing an untrustworthy entity and the device representing a trusted entity.

16. The computer-implemented method of claim 15, further comprising receiving user credentials and a device identification code over the second secure connection.

17. The computer-implemented method of claim 15, further comprising sending marketing information to the device via the second secure connection in a course of the transaction.

18. The computer-implemented method of claim 15, wherein the device is a mobile telephone.

19. A system for conducting a transaction with a portable device, comprising:

a client configured to establish a first secure connection between the client and a server, the client communicating with the server over a network, and

the client configured to enable communication between the portable device and the server via a second secure connection that is established between the portable device and the server, the second secure connection being tunneled within the first secure connection, based on obtaining an address of the client in a physical device-readable form, establishing a pairing relationship between the client and the portable device in response to reading of the address by the portable device, the second secure connection established based on the pairing relationship.

20. The system of claim 19, wherein the client is configured to send marketing information to the portable device via the second secure connection in a course of a transaction conducted between the portable device and the server.