APPARATUS, METHOD AND COMPUTER PROGRAM FOR ESTABLISHING A SERVICE SESSION

• US 20090100181A1
• Filed: 10/11/2007
• Published: 04/16/2009
• Est. Priority Date: 10/11/2007
• Status: Abandoned Application

• Current Assignee: Sony Ericsson Mobile Communications USA Incorporated (Sony Group Corp.)
• Original Assignee: Sony Ericsson Mobile Communications USA Incorporated (Sony Group Corp.)
• Inventors: BENGTSSON, Henrik
• Application Number:
  US11/870,508
• Publication Number:
  US 20090100181A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

A method of establishing a service session via a server with a secondary entity of a first user having a primary entity associated with a subscription is disclosed. The method comprises sending a unique identifier of the first user'"'"'s subscription from the secondary entity to the server; receiving from the server a symbol sequence to the secondary entity; enabling sending of the symbol sequence from the primary entity to the server such that the server is able to match that the received symbol sequence and the sent symbol sequence are identical, wherein a match confirms that the secondary entity is authenticated if the primary entity is authenticated; and setting up the service session on the secondary entity. An entity, server, and corresponding method for the server, as well as computer programs for the entities and the server are also disclosed.

Claims

1. A method of establishing a service session via a server with a secondary entity of a first user having a primary entity associated with a subscription, the method comprising

sending a unique identifier of the first user'"'"'s subscription from the secondary entity to the server;

receiving from the server a symbol sequence to the secondary entity;

enabling sending of the symbol sequence from the primary entity to the server such that the server is able to match that the received symbol sequence and the sent symbol sequence are identical, wherein a match confirms that the secondary entity is authenticated if the primary entity is authenticated; and

setting up the service session on the secondary entity.

2. The method according to claim 1, wherein the enabling comprises

displaying the received symbol sequence by the secondary entity;

and

enabling input of the symbol sequence through a user interface of the primary entity.

3. The method according to claim 1, wherein authentication of the primary entity comprises

sending an assigned identifier and a unique identifier of the subscription associated with the primary entity from the primary entity on a connection between the primary entity and the server such that the server is able to verify that the assigned identifier and the unique identifier of the user'"'"'s phone subscription are matching.

4. The method according to claim 3, wherein the authentication of the primary entity further comprises an initial authentication process, the process comprising

receiving a random identifier from the server to be used as assigned identifier;

sending the assigned identifier via a messaging service to the server such that the server is able to match that the received assigned identifier and the random identifier are identical, wherein a match confirms that the primary entity is authenticated.

5. The method according to claim 1, wherein the service session is an established service session on the primary entity.

6. The method according to claim 1, wherein the service session is initiated by the secondary entity.

7. The method according to claim 1, further comprising

sending a notification from the primary entity to the server that the service session should be moved to the primary entity;

and

setting up the service session on the primary entity.

8. The method according to claim 1, further comprising

sending a unique identifier of the first user'"'"'s subscription from a tertiary entity to the server;

receiving from the server a symbol sequence to the tertiary entity;

sending the symbol sequence from the primary or secondary entity to the server such that the server is able to match that the received symbol sequence and the sent symbol sequence are identical, wherein a match confirms that the tertiary entity is authenticated the entity sending the symbol sequence is authenticated; and

setting up the service session on the tertiary entity.

9. The method according to claim 8, further comprising

sending a notification to the server that the service session should be moved to the primary entity;

and

setting up the service session on the primary entity.

10. The method according to claim 8, further comprising

displaying the received symbol sequence by the tertiary entity;

and

enabling input of the symbol sequence through a user interface of the primary or secondary entity.

11. A method of establishing a service session, on a secondary entity of a first user having a primary entity associated with a subscription, by a server, the method comprising

receiving a unique identifier of the first user'"'"'s subscription from the secondary entity;

generating a symbol sequence;

sending the symbol sequence to the secondary entity;

receiving a symbol sequence from the primary entity;

matching that the received symbol sequence and the sent symbol sequence are identical, wherein a match confirms that the secondary entity is authenticated if the primary entity is authenticated; and

setting up the service session to the secondary entity.

12. The method according to claim 11, wherein authentication of the primary entity comprises

receiving an assigned identifier and a unique identifier of the subscription associated with the primary entity from the primary entity on a connection between the primary entity and the server;

verifying that the assigned identifier and the unique identifier of the user'"'"'s subscription are matching.

13. The method according to claim 12, wherein the authentication further comprises an initial authentication process, the process comprising

generating a random identifier;

sending the random identifier to the entity of the user to be used as assigned identifier;

receiving an assigned identifier via a messaging service from the primary entity;

matching that the received assigned identifier and the random identifier are identical, wherein a match confirms that the primary entity of the user is authenticated.

14. The method according to claim 11, wherein the service session is an established service session on the primary entity.

15. The method according to claim 11, wherein the service session is initiated by the secondary entity.

16. The method according to claim 11, further comprising

receiving a notification from the primary entity that the service session should be moved to the primary entity;

and

setting up the service session on the primary entity.

17. The method according to claim 11, further comprising

receiving a unique identifier of the first user'"'"'s subscription from a tertiary entity;

generating a second symbol sequence;

sending the second symbol sequence to the tertiary entity;

receiving a symbol sequence from the primary or secondary entity to the server such that the server is able to match that the received symbol sequence and the sent secondary symbol sequence are identical, wherein a match confirms that the tertiary entity is authenticated if the entity sending the symbol sequence is authenticated; and

setting up the service session on the tertiary entity.

18. The method according to claim 17, further comprising

receiving a notification from the primary entity that the service session should be moved to the primary entity;

and

setting up the service session on the primary entity.

19. A computer readable medium comprising program code, which when executed by a processor is arranged to cause the processor to perform

reception of a unique identifier of the first user'"'"'s subscription from the secondary entity;

generation of a symbol sequence;

sending of the symbol sequence to the secondary entity;

reception of a symbol sequence from the primary entity;

matching that the received symbol sequence and the sent symbol sequence are identical, wherein a match confirms that the secondary entity is authenticated if the primary entity is authenticated; and

setting up a service session to the secondary entity.

20. A computer readable medium comprising program code, which when executed by a processor is arranged to cause the processor to perform

sending of a unique identifier of the first user'"'"'s subscription from the secondary entity to the server;

reception from the server a symbol sequence to the secondary entity;

enabling of sending of the symbol sequence from the primary entity to the server such that the server is able to match that the received symbol sequence and the sent symbol sequence are identical, wherein a match confirms that the secondary entity is authenticated if the primary entity is authenticated; and

setting up the service session on the secondary entity.

21. The computer readable medium according to claim 20, wherein performing the enabling of sending comprises displaying of the received symbol sequence by the secondary entity.

22. A server arranged for establishing a service session to a secondary entity of a first user having a primary entity associated with a subscription, the server comprising

a receiver arranged to receive a unique identifier of the first user'"'"'s subscription from the secondary entity;

a symbol sequence generator arranged to generate a symbol sequence;

a transmitter arranged to send the symbol sequence to the secondary entity, wherein the receiver is further arranged to receive a symbol sequence from the primary entity;

a comparator arranged to compare the received symbol sequence and the sent symbol sequence, wherein the secondary entity is authenticated if the received symbol sequence and the sent symbol sequence are identical and the primary entity is authenticated; and

a service content streamer arranged to set up a service content connection to the secondary entity.

23. The server according to claim 22, further comprising an authentication mechanism arranged to authenticate the primary entity, wherein the receiver is further arranged to receive an assigned identifier and a unique identifier of the subscription associated with the primary entity from the primary entity on a connection between the primary entity and the server, the mechanism further comprises a controller arranged to verify that the assigned identifier and the unique identifier of the user'"'"'s subscription are matching.

24. The server according to claim 23, wherein the authentication mechanism further is arranged to perform an initial authentication process, the mechanism further comprising a generator arranged to generate random identifier, wherein the transmitter is further arranged to send the random identifier to the primary entity of the user to be used as assigned identifier, the receiver is further arranged to receive an assigned identifier via a messaging service from the primary entity, and the comparator is further arranged to compare the received assigned identifier and the random identifier, wherein the primary entity of the user is authenticated if the received assigned identifier and the random identifier are identical.