ACCESSORY DEVICE AUTHENTICATION

• US 20100075604A1
• Filed: 09/09/2009
• Published: 03/25/2010
• Est. Priority Date: 09/08/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Lydon, Gregory T., Schubert, Emily Clark
• Granted Patent: US 8,208,853 B2
• Time in Patent Office: Days
• US Class Current: 455/41.300
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 2209/043 of tables, e.g. lookup, substitution or mapping
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation

Abstract

An authentication controller coupled to a first communication port of a portable computing device is allowed to provide authentication on behalf of an accessory device coupled to a second communication port of the portable computing device. In one embodiment, a dongle that includes an authentication controller can be coupled with the portable computing device. Accessory devices can also be coupled with the potable computing device through other ports, including wireless ports. The dongle can provide cross-transport authentication for accessories that do not include authentication controllers. Once the dongle had been properly authenticated, the permissions granted to the dongle port can be transferred to a communication port coupled with an accessory.

Claims

1. A method for authenticating an accessory device at a mobile computing device, the method comprising:

receiving an indication that the accessory is coupled with a first port of the mobile computing device;

receiving an indication that an authentication device is coupled with a second port of the mobile computing device;

receiving a cross-transport authentication request from the authentication device via the second port;

authenticating the second port with the authentication device, wherein the authentication grants a set of permissions for communication via the second port when the authentication is successful;

transferring at least a subset of the set of permissions granted to the second port during the authentication to the first port; and

thereafter, communicating with the accessory through the first port according to the transferred permissions.

2. The method according to claim 1, wherein the set of permissions permit an accessory to interoperate with the mobile computing device.

3. The method according to claim 1, wherein the communicating with the accessory includes receiving commands from the accessory.

4. The method according to claim 1, wherein the communicating with the accessory includes sending commands to the accessory.

5. The method according to claim 1, wherein the permissions are revoked when the authentication device is decoupled from the mobile computing device.

6. The method according to claim 1, wherein the permissions are revoked when the accessory is decoupled from the mobile computing device.

7. The method according to claim 1, wherein the authentication controller is physically coupled with the mobile computing device.

8. The method according to claim 1, wherein the authentication controller comprises a dongle.

9. The method according to claim 1, wherein the accessory is wirelessly coupled with the mobile computing device.

10. A mobile computing device comprising:

a multi-transport communication interface configured to exchange commands and data with at least one accessory and an authentication controller, the multi-transport communication interface having a plurality of ports;

control logic coupled with the multi-transport communication interface, the control logic being configured to;

receive a request for cross-transport authentication from an authentication controller via a first port of the plurality of ports of the multi-transport communication interface, the request specifying a second port of the plurality of ports as a destination port, wherein the second port is a wireless port;

perform an authentication operation via the first port; and

in the event that the authentication operation is successful, grant a set of permissions to at least the second port.

11. The mobile computing device according to claim 10, wherein the first port is a physical port.

12. The mobile computing device according to claim 10, wherein the second port comprises a wireless port.

13. The mobile computing device according to claim 10, wherein the first port comprises an asynchronous serial port or a universal serial bus (USB) port.

14. The mobile computing device according to claim 10, wherein the second port comprises a port selected from the group consisting of an EDGE network port, a 3G network port, a phone network port, a FireWire port;

a Wi-Fi port; and

a Bluetooth port.

15. The mobile computing device according to claim 10, wherein the control logic is configured to interoperate with the accessory coupled with the second port.

16. A method for authenticating an accessory device at a mobile computing device, the method comprising:

receiving an indication that an authentication device is;

receiving an accessory identifier from an accessory coupled with a first port of the mobile computing device;

receiving a cross-transport authentication request from an authentication device coupled with a second port of the mobile computing device, the cross-transport authentication request including an authentication device identifier;

authenticating the authentication device through the second port, wherein the authentication grants a set of permissions for communication via the second port when the authentication is successful; and

transferring at least a subset of the set of permissions granted to the second port during the authentication to the first port in the event that the accessory identifier is associated with the authentication device identifier.

17. The method according to claim 16, wherein the set of permissions granted to the second port during the authentication is transferred to the first port in the event that the accessory identifier matches the authentication device identifier.

18. The method according to claim 16, wherein the second port is a wireless port.

19. The method according to claim 16 further comprising communicating with the accessory through the first port.

20. A method for authenticating an accessory device at a mobile computing device, the method comprising:

receiving a cross-transport authentication request from an authentication device coupled with a third port of the mobile computing device, wherein the cross-transport authentication request indicates wireless ports as destination ports;

authenticating the authentication device through the third port, wherein the authentication grants a set of permissions for communication via the third port when the authentication is successful;

transferring at least a subset of the set of permissions granted to the third port during the authentication to a first wireless port and a second wireless port, wherein the first wireless port is coupled with a first accessory and a second wireless port is coupled with a second accessory; and

providing a communication path through the mobile computing device allowing the first accessory and the second accessory to communicate.

21. The method according to claim 20 further comprising communicating with the first accessory through the first port.

22. The method according to claim 20 further comprising communicating with the second accessory through the second port.

23. A dongle comprising:

a housing;

an input/output communication interface disposed at least partially within the housing and configured to couple with a mobile computing device; and

an authentication controller disposed within the housing and communicatively coupled with the input/output communication interface, wherein the authentication controller is configured to communicate a cross-transport authentication request to the mobile computing device and wherein the authentication controller is configured to interact with the mobile computing device to authenticate an accessory communicatively coupled with the mobile computing device through another port.

24. The dongle according to claim 23 wherein the authentication controller is configured to cryptographically respond to messages from the mobile computing device.