System and method for performing commands from a remote source

• US 9,571,489 B2
• Filed: 08/12/2011
• Issued: 02/14/2017
• Est. Priority Date: 08/12/2011
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Sugiyama, Nobukazu, Liu, Kai, Douillet, Ludovic, Wingo, Lobrenzo
• Primary Examiner(s): Tolentino, Roderick
• Application Number:
  US13/209,212
• Publication Number:
  US 20130038425A1
• Time in Patent Office: 2,013 Days
• Field of Search: 726 26- 30
• US Class Current: 1/1
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

According to one embodiment of the invention, a method for secured execution of commands is described. Initially, a second electronic device authenticates a first electronic device and registers the first electronic device as a trusted device. Thereafter, up receipt of a message with one or more embedded commands, such commands are executed without any pre-established communication protocol if the message is from the registered first electronic device.

Claims

1. A method comprising:

(A) registering a second device with a first device at least in part by;

(1) sending from the first device to the second device an authentication request message which includes a value that is unique to first device;

(2) receiving by the first device from the second device an authentication response message;

(3) using, by the first device, a logical operation to transform a value in the authentication response message to render a first comparison value;

(4) determining, by the first device, whether the first comparison value matches a second comparison value internally stored in the first device, the second comparison value not being the value that is unique to first electronic device;

(5) responsive to determining, by the first device, that the first comparison value matches the second comparison value, storing by the first device an indicator that the second device is an authorized device;

(B) subsequent to registering the second device by the first device;

(1) receiving by the first device at least a first message from the second device;

(2) determining by the first device whether the first message includes a command;

(3) responsive to a determination by the first device that the first message does not contain a command, ignore the command by the first device;

(4) responsive to a determination by the first device that the first message contains a command, determining by the first device whether the second device has been previously authenticated by the first device;

(5) responsive to determining by the first device that the second device has not been previously authenticated, ignoring the command;

(6) responsive to determining by the first device that the second device has been previously authenticated, executing by the first device the command in the first message from the second device;

(7) determining by the first device whether the first message includes a next command; and

(8) responsive to determining that the first message includes a next command, executing the next command without further authentication, wherein processing of the first message by the first device comprises scanning the first message for Extensible Markup Language (XML) opening tag wherein the indicator stored by the first device includes an identifier of the second device and a personal identification number (PIN) code.

2. The method of claim 1, wherein the first message includes an Extensible Markup Language (XML) command.

3. The method of claim 1, wherein the PIN code being a derivative value that can be replicated by performing logical operations on the value that is unique to first device.

4. The method of claim 1, wherein executing the command comprises power-down of the first device.

5. The method of claim 1, wherein executing the command comprises power-up of the first device.

6. The method of claim 1, wherein executing the command comprises restart of the first device.

7. A non-transitory computer readable medium that contains software that, when executed by a processing circuit of a first device, performs operations, comprising:

(A) registering a second device with the first device at least in part by;

(1) sending from the first device to the second device an authentication request message which includes a value that is unique to first device;

(2) receiving by the first device from the second device an authentication response message;

(3) using, by the first device, a logical operation to transform a value in the authentication response message to render a first comparison value;

(4) determining, by the first device, whether the first comparison value matches a second comparison value internally stored in the first device, the second comparison value not being the value that is unique to first electronic device;

(5) responsive to determining, by the first device, that the first comparison value matches the second comparison value, storing by the first device an indicator that the second device is an authorized device;

(B) subsequent to registering the second device by the first device;

(1) receiving by the first device at least a first message from the second device;

(2) determining by the first device whether the first message includes a command;

(3) responsive to a determination by the first device that the first message does not contain a command, ignore the command by the first device;

(4) responsive to a determination by the first device that the first message contains a command, determining by the first device whether the second device has been previously authenticated by the first device;

(5) responsive to determining by the first device that the second device has not been previously authenticated, ignoring the command;

(6) responsive to determining by the first device that the second device has been previously authenticated, executing by the first device the command in the first message from the second device;

(7) determining by the first device whether the first message includes a next command; and

(8) responsive to determining that the first message includes a next command, executing the next command without further authentication, wherein;

the indicator includes an identifier of the second device.

8. The non-transitory computer readable medium of claim 7, wherein the first message includes an Extensible Markup Language (XML) command.

9. The non-transitory computer readable medium of claim 7, wherein the instructions are executable for scanning the first message for Extensible Markup Language (XML) opening tag.

10. The non-transitory computer readable medium of claim 7, wherein the indicator includes a PIN code being a derivative value that can be replicated by performing logical operations on the value that is unique to first device.

11. The medium of claim 7, wherein executing the command comprises restart of the first device.

12. The medium of claim 7, wherein executing the command comprises power up of the first device.

13. The medium of claim 7, wherein executing the command comprises power-down of the first device.