Connecting mobile devices, internet-connected hosts, and cloud services

• US 9,268,545 B2
• Filed: 05/27/2011
• Issued: 02/23/2016
• Est. Priority Date: 03/31/2011
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Lortz, Victor B., Rangarajan, Anand P., Rathi, Somya, Kesavan, Vijay Sarathi
• Primary Examiner(s): Walsh, John B
• Application Number:
  US13/134,064
• Publication Number:
  US 20120252405A1
• Time in Patent Office: 1,733 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Applications are downloaded to a device from a cloud-based service by establishing trust with between the device and a host system. The host system and the cloud-based service have a pre-existing trust relationship.

Claims

1. A method performed by a device, of downloading an application from a cloud-based service comprising:

establishing a local out of band connection between the device and a host system to establish security between the device and the host system;

receiving a uniform resource locator (URL) and a setup identification from the host system;

connecting to the cloud-based service through the URL;

downloading and installing a pre-configured application from the cloud-based service using the received setup identification;

sending a device type to the cloud based service;

receiving a correct type of pre-configured application from the cloud-based service based upon the sent device type;

redirection to another URL; and

connecting to the host system and cloud-based service.

2. The method of claim 1, wherein a pre-existing trust relationship exists between the host system and the cloud-based service.

3. The method of claim 1, wherein the establishing a local connection includes performing out of band exchange of data using one or more of the following:

NFC touch, infrared, 1-D or 2-D barcode, accelerometer bump, time-limited push-button configuration, and/or PIN number entry.

4. The method of claim 1, wherein the receiving the URL from the host system is through one of a quick response (QR) code that is read from the host system or near field communication (NFC) NDEF URL record.

5. The method of claim 4, wherein the URL is processed by a web browser of the device to enable downloading of the application.

6. The method of claim 1, wherein the downloading and installing the application includes verification of the setup identifier provided by the host system to the device.

7. The method of claim 1, wherein the redirecting to another URL includes receiving one or more applications from another cloud based service.

8. The method of claim 1 further comprising downloading security configuration from the cloud-based service.

9. The method of claim 1 further comprising confirming a second device to receive access rights to the host system.

10. The method of claim 1, wherein the method is performed by a mobile device.

11. A device comprising:

one or more processors;

a wireless interface coupled to the one or more processors, wherein the wireless interface is configured to connect through an out of band connection to establish security with a host system and to receive a uniform resource locator (URL) to a cloud-based service from the host system, a setup identifier, and a secret; and

a memory coupled to the one or more processors and wireless interface to store the URL, the setup identifier, and secret, wherein the wireless interfaces uses the URL and the setup identifier to connect to the cloud-based service to download a pre-configured applications to be stored in the memory, wherein the wireless interface sends a device type to the cloud-based service to receive a correct type of pre-configured application based upon the device type, wherein after downloading the correct type of pre-configured applications, the wireless interface connects to the host system and the cloud-based service.

12. The device of claim 11, wherein the wireless interface includes a local channel that is an out of band channel.

13. The device of claim 11, further comprising one or more of the following:

a near field reader and a quick response reader, and connection to the host system is performed using one of near field communication or quick response code, and wherein the receive from the host system is performed using one of near field communication (NFC) or quick response (QR) code.

14. The device of claim 11, wherein connecting to the cloud-based service is through an Internet connection.

15. The device of claim 11, wherein the download of one or more applications includes downloading security configuration.

16. The device of claim 11, wherein the host system is one of a personal computer, a set top box, a television, a mobile device, or a vehicle.

17. The device of claim 11, wherein the memory includes a web browser that reads the URL and is redirected to a different URL for downloading as instructed by the cloud-based service.

18. The device of claim 11, wherein the device is a mobile device.

19. One or more non-transitory computer-readable media having stored thereon computer executable instructions that, when executed, perform a method comprising:

connecting locally through an out of band connection to a host system to establish security between the device and the host system;

receiving a uniform resource locator to a cloud-based service from the host system after establishing security;

connecting to the cloud-based service through the URL;

downloading and installing a pre-configured applications through the cloud-based service;

sending a device type to the cloud based service;

receiving a correct type of pre-configured application from the cloud-based service based upon the sent device type;

redirection to another URL; and

connecting to the host system and the cloud-based service.

20. The computer-readable media of claim 19 further receiving secrets from the host system to establish trust between with the cloud-based service.

21. A device comprising:

one or more processors;

memory configured to the one or more processors, having instructions to;

establish a local out of band connection to a host system to establish security between the device and the host system;

receive one or more of the following from the host system after establishing security, through the local out of band connection;

a uniform resource indicator to a cloud-based service, a setup identifier, and a secret;

connect to the cloud-based service, to download one or more applications once connected to the cloud-based service;

sending a device type to the cloud based service;

receive another one or more applications based upon the sent device type;

connect to the host system and the cloud-based service.

22. The device of claim 21, further comprising one or more of the following:

a near field reader and a quick response reader, and the establish local connection is performed using one of near field communication or quick response code, and wherein the receive from the host system is performed using one of near field communication (NFC) or quick response (QR) code.

23. The device of claim 21, wherein the connect to the cloud-based service is through an Internet connection.

24. The mobile device of claim 21, wherein the download one or more applications includes downloading security configuration.

25. The mobile device of claim 21, wherein the host system is one of a personal computer, a set top box, a television, another mobile device, or a vehicle.

26. The mobile device of claim 21, wherein the memory includes a web browser that reads the URL and is redirected to a different URL for downloading as instructed by the cloud-based service.

27. A method performed by a host system to allow a device to download applications comprising:

establishing trust with a cloud-based service;

receiving a request to connect the device to the host system and/or connect the device to the cloud-based service;

connecting through a local out of band connection to establish security between the device and host system;

sending setup data to the cloud-based service to be sent to the device for use in downloading applications, the setup data includes sending of a device type to the cloud-based service after downloading the applications, wherein another application is downloaded based on the sent device type wherein the other application is used to connect the device to the host system and/or the cloud-based service.

28. The method of claim 27, wherein the establishing trust is performed during a manufacturing of the host system.

29. The method of claim 27, wherein the establishing the trust relationship includes digital certificates and hardware protection mechanisms implementing a secure boot process with software attestation and hardware-protected key storage, implemented by the host system to maintain integrity of the trust relationship.

30. The method of claim 27, wherein the sending includes sending a configuration and setup identification to the cloud-based system.

31. The method of claim 27, wherein the host system is a vehicle.