Systems and methods of establishing a secure connection between a remote platform and a base station device

• US 8,966,588 B1
• Filed: 06/04/2011
• Issued: 02/24/2015
• Est. Priority Date: 06/04/2011
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Pizot, Laurent, Anand, Pankaj, Refstrup, Jacob
• Primary Examiner(s): Moorthy, Aravind
• Application Number:
  US13/153,401
• Time in Patent Office: 1,361 Days
• Field of Search: 726/3, 726/4, 726/5, 726/34, 713/168, 709/208, 709/217, 709/225
• US Class Current: 726/4
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

Systems and methods of establishing a secure connection between a remote platform and a base station device are disclosed. An example of a method includes registering a base station device with a cloud service. The method also includes requesting from the cloud service, a claim code for the base station device. The method also includes providing access from a remote platform to the base station device by the cloud service based on the registration of the base station device and the claim code.

Claims

1. A method of establishing a secure connection between a remote platform and a base station device, comprising:

registering a base station device with a cloud service;

requesting from the cloud service, a claim code for the base station device; and

outputting the claim code by the base station device for the remote platform when a user of the remote platform has physical access to the base station device, the claim code sent by the remote platform to the cloud service with a request to access the base station device to enable the remote platform to communicate with the base station device via the cloud service when the user of the remote platform no longer has physical access to the base station device when a comparison of the claim code confirms the remote platform as having access to the base station device.

2. The method of claim 1, wherein the claim code is combined with a device Identification (ID) to make the claim code unique for the base station device.

3. The method of claim 1, further comprising receiving the claim code from the cloud service only at the base station device as a security measure to ensure that the claim code is only provided to a user having physical access to the base station device.

4. The method of claim 1, wherein the claim code expires after an event occurs.

5. The method of claim 1, wherein the base station device is only accessible by the remote platform after the claim code is received by the cloud service from the remote platform.

6. The method of claim 1, wherein the base station device is only accessible by the remote platform after the remote platform is checked against a white list and a black list.

7. The method of claim 1, wherein the base station device is only accessible by the remote platform after monitoring attempted access to the base station device, and wherein unauthorized platforms are added to a blacklist.

8. The method of claim 1, wherein the base station device receives management commands from the remote platform after the cloud service provides access to the base station device.

9. The method of claim 1, further comprising registering the remote platform using at least one security credential.

10. The method of claim 1, wherein the claim code is only provided to a user who has actual physical access to the base station device at the time the claim code is delivered.

11. The method of claim 1, wherein the remote platform serves as an interface when registering the base station device and for receiving the claim code while physically located at the base station device.

12. A system, comprising:

a cloud service configured for connection to at least one base station device and at least one remote platform, wherein the base station device registers with the cloud service;

a claim code generated by the cloud service, the claim code issued to the base station device for establishing a secure connection between the at least one remote platform and the at least one base station device, wherein the base station device is to output the claim code for the at least one remote platform when the at least one remote platform is connected to the base station device; and

a management interface of the cloud service to enable access by the remote platform to the at least one base station device using the claim code sent by the remote platform to the cloud service with a request to access the at least one base station device when a comparison of the claim code confirms the remote platform as having access to the base station device.

13. The system of claim 12, wherein the claim code is combined with a device Identification (ID) to make the claim code unique for the base station device.

14. The system of claim 12, wherein the cloud service only returns the claim code to the base station device.

15. The system of claim 12, wherein the claim code expires after a predetermined time.

16. The system of claim 12, wherein the cloud service only provides access by the at least one remote platform to the at least one base station device after the claim code is received by the cloud service from the at least one remote platform.

17. The system of claim 12, further comprising a white list and a black list, wherein the cloud service only grants access to the at least one base station device if the remote platform clears at least one of the white list and the black list.

18. The system of claim 12, wherein the management interface provides printing services from the remote platform at the base station device.

19. A printing system, comprising:

a printer device having processing capability at least sufficient to establish a communications connection with a wide area network and a cloud service operatively associated with the printer device on the wide area network, the printer device registering with the cloud service

the printer device to output a claim code for a mobile device when the mobile device is local to the printer device; and

wherein the printer device is accessible by the mobile device via the cloud service based on registration of the printer device with the cloud service, when the claim code for the printer device is sent by the mobile device to the cloud service with a request to access the printer device and a comparison of the claim code confirms the mobile device as having access to the printer device.

20. The printing system of claim 19, wherein the claim code includes a revolving code with respect to time, the revolving code is combined with a constant device Identification (ID) for the printer device, the combination of the revolving code and the constant device ID being different for the printer device at different times.