In-band peripheral authentication

• US 9,224,359 B2
• Filed: 09/26/2011
• Issued: 12/29/2015
• Est. Priority Date: 09/26/2011
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Inventors: Bourque, Francis P.
• Primary Examiner(s): OBERLY, ERIC T
• Application Number:
  US13/245,437
• Publication Number:
  US 20130080662A1
• Time in Patent Office: 1,555 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 12/0653 with centralised address assignment
• CPC Class Codes: G06F 13/102 where the programme performs an interfacing function, e.g. device driver G06F13/105 takes precedence; scheduling within device drivers G06F9/52; contention policies within device drivers G06F9/4881
• CPC Class Codes: G06F 13/387 for adaptation of different data processing systems to different peripheral devices, e.g. protocol converters for incompatible systems, open system
• CPC Class Codes: G06F 13/4022 using switching circuits, e.g. switching matrix, connection or expansion network G06F13/4009 takes precedence
• CPC Class Codes: G06F 13/4282 on a serial bus, e.g. I2C bus, SPI bus on daisy chain buses G06F13/4247
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G09G 2370/042 for monitor identification
• CPC Class Codes: G09G 2370/047 using display data channel standard [DDC] communication
• CPC Class Codes: G09G 2370/12 Use of DVI or HDMI protocol in interfaces along the display data pipeline
• CPC Class Codes: G09G 5/006 Details of the interface to the display terminal specific for a display terminal using a CRT G09G1/167; using a flat panel G09G3/2096; circuits for interfacing with colour displays G09G5/04
• CPC Class Codes: H04N 21/426 Internal components of the client ; Characteristics thereof H04N5/44 takes precedence
• CPC Class Codes: H04N 21/43635 HDMI
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card

Abstract

This document describes techniques (300, 400) and apparatuses (100, 500, 600, 700) for in-band peripheral authentication. These techniques (300, 400) and apparatuses (100, 500, 600, 700) may communicate via a non-media channel allowing host device (102) to authenticate peripheral (106), enable an enhanced operational mode of the host device (102), and/or provide content configured for the peripheral (106) without the use of out-of-band signaling.

Claims

1. A method, comprising:

determining an address of a non-media channel at which a peripheral communicatively coupled to a media interface of a host device can be authenticated by the host device;

performing an authentication protocol using the address at which the peripheral can be authenticated;

responsive to the peripheral being authenticated, enabling a full operational mode between the host device and the media interface, wherein the full operational mode includes configuring the media interface to provide content to a component of the peripheral via a media channel and receive input data from another component of the peripheral via the non-media channel; and

responsive to the peripheral not being authenticated, enabling a limited operational mode between the host device and the media interface, wherein the limited operational mode includes limiting the quality of media provided via the media channel of the media interface.

2. The method as recited in claim 1, wherein the determining includes receiving address information from the peripheral via the non-media channel.

3. The method as recited in claim 1, wherein the full operational mode includes:

a windowed user interface context that is different from a non-windowed user interface context enabled when the peripheral is not connected to the host device.

4. The method as recited in claim 1, wherein the full operational mode comprises:

a user interface context for manipulating media provided to the peripheral via the media interface.

5. The method as recited in claim 4, wherein a representation of graphic elements of the user interface context is not provided to the peripheral via the media interface.

6. The method as recited in claim 1, wherein the full operational mode includes a capability to receive general purpose input/output signals, status information, or short messages from the peripheral via the non-media channel.

7. The method as recited in claim 1, wherein the enabling the limited operational mode includes:

disabling one or more capabilities of the host device.

8. The method as recited in claim 1, wherein performing the authentication protocol includes:

receiving an identifier from the peripheral;

determining whether the identifier matches one of a set of authentic identifiers; and

challenging the peripheral through the non-media channel responsive to the identifier matching one of the set of authentic identifiers.

9. The method as recited in claim 1, further comprising:

causing the host device to increase an amount of current output to a connector of the non-media channel, or re-route an audio channel, in response to the peripheral being authenticated.

10. The method as recited in claim 1, further comprising:

configuring the full operational mode based on digitally signed enhanced display identification data (EDID) that includes address information, capabilities, or features of the peripheral.

11. A method, comprising:

making available an address of a non-media channel to a host device for authentication of a peripheral communicatively coupled to a media interface of the host device;

receiving an authentication request from the host device at the address of the non-media channel;

communicating an authentication response to the host device via the non-media channel; and

receiving, via the media interface of the host device, content configured for the peripheral based on the authentication response communicated to the host device,

wherein, responsive to the peripheral being authenticated, a component of the peripheral receives the content via a media channel of the media interface and another component of the peripheral provides input data to the non-media channel of the media interface, and

wherein, responsive to the peripheral not being authenticated, the received content is of limited media quality.

12. The method as recited in claim 11, further comprising:

receiving a use command effective to configure the peripheral for media interaction, the use command based on the authentication response communicated to the host device.

13. The method as recited in claim 11, wherein making available the address includes:

presenting the address for the authentication of the peripheral instead of another address for identifying or authenticating a media interface component of the peripheral.

14. The method as recited in claim 11, wherein making available the address includes:

determining an unused address of the non-media channel and presenting the unused address to the host device.

15. The method as recited in claim 11, wherein other addresses of the non-media channel identify a component capable of indicating media capabilities of the peripheral or a component for encrypting contents of the media interface.

16. The method as recited in claim 11, further comprising:

communicating information identifying media capabilities of the peripheral to the host device.

17. The method as recited in claim 11, wherein the content configured for the peripheral includes:

a windowed user interface context that is manipulable via inputs of the peripheral.

18. The method as recited in claim 11, wherein the content configured for the peripheral includes:

multimedia content without user interface elements for manipulating the multimedia content.

19. A peripheral comprising:

an authentication module configured to communicate an authentication response to an authentication request received from a host device via a non-media channel;

a communication switch configured to, responsive to connection to the host device, switch the non-media channel from a media interface module of the peripheral to the authentication module of the peripheral to enable authentication of the peripheral;

a processor configured to receive, via the media interface of the host device, content configured for the peripheral based on the authentication response communicated to the host device,

wherein, responsive to the peripheral being authenticated, a component of the peripheral receives the content via a media channel of the media interface and another component of the peripheral provides input data to a non-media channel of the media interface, and

wherein, responsive to the peripheral not being authenticated, the received content is of limited media quality.

21. The peripheral as recited in claim 19, wherein the non-media channel is compliant with an inter-integrated circuit (I²C) or a display data channel (DDC) protocol.

20. A peripheral comprising:

an authentication module configured to communicate a response to an authentication request received from a host device via a non-media channel, the response useful to authenticate the peripheral;

a communication switch configured to, responsive to connection to the host device, switch the non-media channel from a media interface module of the peripheral to the authentication module of the peripheral to enable authentication of the peripheral; and

a cable coupled to the peripheral, wherein the communication switch is located within the cable.