Sharing between CPE and companion device

• US 9,419,964 B2
• Filed: 06/26/2014
• Issued: 08/16/2016
• Est. Priority Date: 06/26/2014
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Srivastav, Vivek
• Primary Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US14/315,973
• Publication Number:
  US 20150381606A1
• Time in Patent Office: 782 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 12/28 characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks] wireless communication networks H04W ; arrangements for dividing the transmission path H04W40/00
• CPC Class Codes: H04L 12/2809 indicating that an appliance service is present in a home automation network monitoring functionality H04L43/0817; discovery or management thereof, e.g. service location protocol [SLP] or web services, H04L67/51
• CPC Class Codes: H04L 2012/2849 Audio/video appliances
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/143 Termination or inactivation of sessions, e.g. event-controlled end of session
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

In one embodiment, a method and system for a companion device to share an application context and authorization context with a consumer premises equipment (CPE) device is described. The method and system includes transmitting a search request by a search request transmitter using a service discovery protocol, receiving a response to the search request from the CPE device, creating an authorization context at an authorization context creating processor, the authorization context including metadata that grants access to a resource, transmitting, by an authorization context transmitter, the authorization context to an application resident on the CPE device, establishing a trusted session between the application resident on the CPE and a device application, the establishing a session by the device application including requesting a digital certificate from the CPE, receiving the digital certificate from the CPE, and validating the digital certificate, creating, at an application context data creating processor, application context data, and transmitting the application context data created to the CPE device, wherein the application context data enables the CPE device to request access to an authorized resource from a resource provider. Related methods, systems, and apparatus are also described.

Claims

1. A companion device based system for sharing an application context and authorization context between a consumer premises equipment (CPE) device comprising at least one of a television or a set top box and a companion device comprising at least one of a hand held computing device, a smart phone, a tablet, or a laptop or a personal computer, the companion device system comprising:

a companion device search request transmitter for transmitting a search request using a service discovery protocol;

a companion device receiver for receiving a response to the search request from the CPE device;

a companion device authorization context creating processor which creates an authorization context, the authorization context comprising metadata that grants access to a resource;

a companion device authorization context transmitter which transmits the authorization context to an application resident on the CPE device;

a companion device application that establishes a trusted session between the application resident on the CPE and the device application, the device application comprising;

a companion device certificate requester which requests a digital certificate from the CPE;

a companion device certificate receiver for receiving the digital certificate from the CPE; and

a companion device certificate validator which validates the digital certificate;

a companion device application context data creating processor which creates application context data; and

a companion device application context data transmitter which transmits the application context data created to the CPE device,

wherein the application context data enables the CPE device to request access to an authorized resource from a resource provider.

2. The system of claim 1 wherein the search request is performed using a network resource discovery protocol.

3. The system of claim 2 wherein the network resource discovery protocol comprises the Simple Service Discovery Protocol (SSDP).

4. The system of claim 2 wherein the network resource discovery protocol service discovery protocol comprises the Universal Plug and Play (UPNP) protocol.

5. The system of claim 1 wherein the application context data comprises at least:

user information;

authorization context data; and

application state data.

6. The system of claim 1 wherein user credentials are entered on the companion device and not on the CPE.

7. The system of claim 1 wherein the system unifies resources authorization grant on the companion device and at least one other companion device through a single authentication sequence.

8. The system of claim 1 wherein the trusted session comprises a session with implicit trust between the application resident on the CPE and the device application.

9. The system of claim 1 wherein the companion device determines when to destroy the session.

10. The system of claim 9 wherein the companion device resumes an application state which existed prior to establishing the session upon destruction of the session.

11. A consumer premises equipment (CPE) device system comprising at least one of a television or a set top box for sharing an application context and authorization context between the CPE device and a companion device comprising at least one of a hand held computing device, a smart phone, a tablet, or a laptop or a personal computer, the CPE device system comprising:

a CPE device response transmitter which transmits to the companion device, in response to receipt of a search request using a service discovery protocol, a response comprising;

a location;

a unique service name; and

a search target value;

a CPE device certificate transmitter, which transmits a digital certificate to the companion device, in response to a request for the certificate;

a CPE device application context data receiver which receives application context data from the companion device, the application context data comprising an application access token; and

a CPE device resource requester which sends the application access token to a resource provider.

12. The system of claim 11 wherein the CPE device is operative to receive access to the requested resource from the resource provider, in response to receipt of the access token by the resource provider.

13. The system of claim 11 wherein the application context data further comprises:

user information; and

application state data.

14. The system of claim 11 wherein user credentials are entered on the companion device and not on the CPE.

15. The system of claim 11 wherein the system unifies resources authorization grant on the companion device and at least one other companion device through a single authentication sequence.

16. The system of claim 11 wherein the CPE determines when to destroy the session.

17. A method for a companion device comprising at least one of a hand held computing device, a smart phone, a tablet, or a laptop or a personal computer to share an application context and authorization context with a consumer premises equipment (CPE) device comprising at least one of a television or a set top box, the method comprising:

transmitting a search request by a companion device search request transmitter using a service discovery protocol;

receiving a response at the companion device to the search request from the CPE device;

creating an authorization context at a companion device authorization context creating processor, the authorization context comprising metadata that grants access to a resource;

transmitting, by a companion device authorization context transmitter, the authorization context to an application resident on the CPE device;

establishing, by the companion device, a trusted session between the application resident on the CPE and a device application, the establishing a session by the device application comprising;

requesting, by the companion device, a digital certificate from the CPE;

receiving, at the companion device, the digital certificate from the CPE; and

validating, by the companion device, the digital certificate;

creating, at a companion device application context data creating processor, application context data; and

transmitting the application context data created at the companion device, to the CPE device,

wherein the application context data enables the CPE device to request access to an authorized resource from a resource provider.

18. The method of claim 17 wherein the application context data comprises at least:

user information;

authorization context data; and

application state data.

19. The method of claim 17 wherein the companion device determines when to destroy the session.

20. A method for a consumer premises equipment (CPE) device comprising at least one of a television or a set top box to share an application context and authorization context with a companion device comprising at least one of a hand held computing device, a smart phone, a tablet, or a laptop or a personal computer, the method comprising:

transmitting, in response to receipt of a search request using a service discovery protocol, by a CPE device response transmitter, a response to the companion device, the response comprising;

a location;

a unique service name; and

a search target value;

transmitting a digital certificate by a CPE device certificate transmitter to the companion device, in response to a request for the certificate;

receiving, at a CPE device application context data receiver, application context data from the companion device, the application context data comprising an application access token; and

sending, by the CPE device, the application access token to a resource provider.