Providing limited access to a service device via an intermediary

• US 9,479,498 B2
• Filed: 09/28/2012
• Issued: 10/25/2016
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: Tahoe Research Limited (f/k/a Learndale Limited) (Vector Capital Corporation)
• Original Assignee: Intel Corporation
• Inventors: Kohlenberg, Tobias, Birkel, Steven, Wouhaybi, Rita, Mo, Stanley
• Primary Examiner(s): Bugg, George
• Assistant Examiner(s): Akhter, Sharmin
• Application Number:
  US13/631,293
• Publication Number:
  US 20140091900A1
• Time in Patent Office: 1,488 Days
• Field of Search: 340 57- 572, 340/12.22, 34042613-42617, 34053914-53915, 340/5.1, 340/426.35, 340/426.36
• US Class Current: 1/1
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00857 where the code of the data carrier can be programmed
• CPC Class Codes: G08C 17/02 using a radio link
• CPC Class Codes: G08C 2201/40 Remote control systems using repeaters, converters, gateways
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/046 involving vehicles, e.g. floating traffic data [FTD] or vehicle traffic prediction
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

Systems and methods may provide for brokering limited access to a service device via an intermediary. In one example, the method may include receiving a request communication at a control device including a request for limited access to a service device, wherein the request is received from an intermediary device on behalf of a request device, and transmitting an access communication to the intermediary device, wherein the access communication includes an access ticket to be used by the request device to gain the limited access of the service device.

Claims

1. A control device comprising:

a request module to receive a request communication including a request of limited access of a service device comprising a vehicle at a control device comprising a remote keyless entry device, wherein the request is received from a mobile intermediary device on behalf of a mobile request device;

a transmit module to transmit an access communication to the mobile intermediary device, wherein the access communication includes an access ticket to be used by the mobile request device to gain the limited access of the service device; and

an authentication module to authenticate the request of the limited access of the service device at the control device using an authentication and access protocol.

2. The control device of claim 1, wherein the access ticket includes a scope of the limited access of the service device, wherein the scope of the limited access is based on an access request ticket included in the request communication.

3. The control device of claim 2, wherein the scope of limited access of the service device is limited by one or more of time and distance.

4. The control device of claim 1, wherein the authentication and access protocol is Kerberos.

5. At least one non-transitory computer readable storage medium comprising a set of instructions which, when executed by a processor, cause a service device comprising a vehicle to:

receive a request communication from a mobile request device including a request of limited access of the service device, wherein the request communication includes an access ticket originating at a control device comprising a remote keyless entry device and sent via a mobile intermediary device; and

authenticate the request of the limited access to the service device to allow the limited access of the service device by the mobile request device, wherein authenticating the request of the limited access to the service device to allow limited access is to include determining if the access ticket originated at the control device.

6. The at least one non-transitory computer readable storage medium of claim 5, wherein the request of the limited access to the service device is authenticated using Kerberos.

7. The at least one non-transitory computer readable storage medium of claim 5, wherein a scope of the limited access of the service device is to be limited by one or more of time and distance.

8. At least one non-transitory computer readable storage medium comprising a set of instructions which, when executed by a processor, cause a mobile intermediary device to:

receive a request communication from a mobile request device, wherein the request communication includes a request of limited access of a service device comprising a vehicle;

transmit an access request communication to a control device comprising a remote keyless entry device, wherein the access request communication includes an access request ticket describing a requested scope of the limited access of the service device;

receive an access communication from the control device, wherein the access communication is to include an access ticket describing a granted scope of the limited access of the service device; and

transmit a transfer communication to the mobile request device, wherein the transfer communication is to include the access ticket and wherein the request communication, the access request communication, the access communication and the transfer communication utilize an authentication and access protocol.

9. The at least one non-transitory computer readable storage medium of claim 8, wherein, when executed, the set of instructions cause the mobile intermediary device to create a secure connection with the mobile request device.

10. The at least one non-transitory computer readable storage medium of claim 8, wherein the requested scope of the limited access of the service device is limited by one or more of time and distance.

11. The at least one non-transitory computer readable storage medium of claim 8, wherein the authentication and access protocol is Kerberos.

12. At least one non-transitory computer readable storage medium comprising a set of instructions which, when executed by a processor, cause a mobile request device to:

communicate a first request for limited access of a service device comprising a vehicle to a mobile intermediary device;

receive an access ticket from the mobile intermediary device, the access ticket being received at the mobile intermediary device on behalf of the mobile request device from a control device comprising a remote keyless entry device, wherein the access ticket includes a scope of the limited access of the service device; and

Communicate a second request to the service device, wherein the second request presents the access ticket to the service device and wherein the instructions are to be executed in a secure execution environment.

13. The at least one non-transitory computer readable storage medium of claim 12, wherein the scope of the limited access of the service device is limited by one or more of time and distance.

14. The at least one non-transitory computer readable storage medium of claim 12, wherein the instructions, when executed, cause the mobile request device to create a secure connection with the mobile intermediary device.

15. The at least one non-transitory computer readable storage medium of claim 12, wherein the first request is to be communicated to the mobile intermediary device via a telephone connection.