Device association via video handshake

• US 9,288,229 B2
• Filed: 11/10/2011
• Issued: 03/15/2016
• Est. Priority Date: 11/10/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Skype S.Ã R.L. (Microsoft Corporation)
• Inventors: Kaufman, Matthew
• Primary Examiner(s): Patel, Nirav B
• Assistant Examiner(s): Waliullah, Mohammed
• Application Number:
  US13/293,242
• Publication Number:
  US 20130125224A1
• Time in Patent Office: 1,587 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

A method of pairing a first device with a second device is disclosed. Accordingly, an image that include encoded data is generated by the first device. The encoded data includes a unique identifier for identifying the first device and an arbitrary security code. The first device displays the image on a display. The second device captures the image using an image sensing device. The encoded data is decoded to generate a decoded data. The second device sends the decoded data to a server that is communicatively connected to the first device and the second device. Upon receiving the decoded data and using the unique identifier, the server communicates with the first device to verify the arbitrary security code.

Claims

1. A method comprising:

participating in an active communication session between a first device and a second device, the active communication session including an audio-visual communication;

capturing, using an image sensing device of the first device, an image displayed on a display of a third device, the image generated to expose a unique identifier identifying the third device, a security code, and an indication that the first device is to initiate transfer of at least part of the active communication session between the first device and the second device to the third device after the first device and the third device are paired; and

sending a request that includes the unique identifier and the security code to a server to enable the server to verify, using the unique identifier, the security code to pair the first device and the third device for communication, the pairing of the first device and the third device causing a communication channel to be established between the first device and the third device and enabling the at least part of the active communication session to be transferred from the first device to the third device via the communication channel established through the pairing upon verification of the security code, according to a preference of the user of the first device, and without interrupting the active communication session, the active communication session transferred without interruption, at least in part, by running a remaining portion of the active communication session concurrently and synchronously on the first device with the at least part of the active communication session that is transferred.

2. The method of claim 1, wherein the unique identifier and the security code are included in the image in an obfuscated form and the unique identifier and the security code are configured to be decoded from the image by one or more of the first device or the server.

3. The method of claim 2, wherein the first device is in the active communication session with the second device at a time of said sending.

4. The method of claim 1, wherein the remaining portion of the active communication session runs concurrently and synchronously on the first device with the at least part of the active communication session that is transferred responsive to less than a whole of the active communication session being transferred from the first device.

5. The method of claim 1, wherein an authentication certificate that corresponds to a user of the first device is generated and sent to the third device prior to the transfer.

6. The method of claim 1, wherein the transfer of the at least part of the active communication session causes a session between the second device and the third device to be set up.

7. The method of claim 1, wherein the at least part of the active communication session that is transferred from the first device to the third device includes a video portion of the active communication session responsive to less than an entire active communication session being transferred from the first device.

8. A system comprising:

one or more processors; and

one or more computer-readable storage media storing instructions that are executable by the one or more processors to perform operations including;

participating in an active communication session between a first device and a second device, the active communication session including an audio-visual communication;

during the active communication session between the first device and the second device, capturing an image displayed on a display of a third device, the image being generated to expose a unique identifier for identifying the third device, a security code, and an indication that the first device is to 5 initiate a transfer of at least part of the active communication session between the first device and the second device to the third device after the first device and the third device are paired;

processing the image to retrieve the unique identifier and the security code; and

sending the unique identifier and the security code to a server to enable the server to verify the security code using the unique identifier, and to pair the first device with the third device, the pairing effective to initiate a communication event between the first device and the third device that enables the first device to initiate the transfer of the at least part of the active communication session from the first device to the third device over a communication channel established as part of the pairing and to maintain the active communication session with the second device throughout the transfer, the communication channel established upon verification of the security code and according to a preference of a user of the first device.

9. The system of claim 8, wherein the unique identifier and the security code are obfuscated in the image and are configured to be decoded from the obfuscated form by at least one of the first device or the server.

10. The system of claim 8, wherein the first device is configured to participate in the active communication session with the second device at a time of said sending.

11. The system of claim 8, wherein the first device is configured to run a remaining communication session with the second device concurrently and synchronously with the at least part of the active communication session that is transferred responsive to less than a whole of the active communication session being transferred from the first device.

12. The system of claim 8, wherein a user of the first device is associated with an authentication certificate generated by the server and sent to the third device, prior to the transfer.

13. The system of claim 8, wherein the transfer of the at least part of the active communication session is configured to cause a session to be established between the second device and the third device.

14. The system of claim 8, wherein the at least part of the active communication session that is transferred includes a video portion of the active communication session responsive to less than an entire active communication session being transferred from the first device.

15. A computer readable storage device comprising a program which, responsive to execution by one or more computing devices, causes the one or more computing device to perform operations comprising:

capturing an image using an image sensor of a first device, the image including a unique identifier of a second device, a security code, and an indication that the second device is to initiate a transfer of at least part of an active communication session between the second device and a third device from the second device to the first device after the first device and the second device are paired, the unique identifier identifying the second device on a network for communication, the security code comprising a piece of information that is separate from the unique identifier and verifiable by the second device, and the active communication session including an audio-visual communication;

sending the unique identifier and the security code to a server via the network and instructing the server to communicate with the second device using the unique identifier to verify the security code with the second device; and

responsive to verification of the security code, pairing the first device and the second device for communication, the pairing causing a communication channel to be established between the first device and the second device that allows the second device to initiate the transfer specified by the indication and according to a preference of a user of the second device, the active communication session with the third device being maintained throughout the transfer.

16. The computer readable storage device of claim 15, wherein the operations further include decoding the unique identifier and the security code from the image if the image includes the unique identifier and the security code in an obfuscated form.

17. The computer readable storage device of claim 15, wherein the operations further include determining that at a time of the sending, the second device is in the active communication session with the third device.

18. The computer readable storage device of claim 15, wherein the unique identifier and the security code are included in the image in an obfuscated form and the unique identifier and the security code are configured to be decoded from the image by one or more of the second device or the server.

19. The computer readable storage device of claim 15, wherein if less than a whole of the active communication session is transferred to the first device, the operations further comprise running the at least part of the active communication session concurrently and synchronously with a remaining active communication session on the second device.

20. The computer readable storage device of claim 18, wherein the operations further include generating an authentication certificate corresponding to a user of the second device and sending the authentication certificate to the first device, prior to the transferring.

21. The computer readable storage device of claim 15, wherein the operations further comprise transferring the at least part of the active communication session, including transferring a video portion of the active communication session responsive to less than an entire active communication session being transferred from the second device.