Method and system for authenticating an accessory

• US 8,117,651 B2
• Filed: 06/27/2006
• Issued: 02/14/2012
• Est. Priority Date: 04/27/2004
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Novotney, Donald J., Filson, John B., Tupman, David, Lydon, Gregory T.
• Primary Examiner(s): Hoffman, Brandon
• Application Number:
  US11/476,999
• Publication Number:
  US 20070234420A1
• Time in Patent Office: 2,058 Days
• Field of Search: 726/9, 726/10, 726/26, 713/170, 709/237, 709/229
• US Class Current: 726/16
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H01R 13/6456 comprising keying elements at different positions along the periphery of the connector
• CPC Class Codes: H01R 2103/00 Two poles
• CPC Class Codes: H01R 24/58 Contacts spaced along longitudinal axis of engagement
• CPC Class Codes: H01R 27/00 Coupling parts adapted for co-operation with two or more dissimilar counterparts for dissimilar contact members H01R13/35; supported only by co-operation with a counterpart H01R31/00; with a holder adapted for supporting apparatus to which its counterpart is attached H01R33/90
• CPC Class Codes: H01R 31/06 Intermediate parts for linking two coupling parts, e.g. adapter with a holder adapted for supporting apparatus to which its counterpart is attached H01R33/94
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method, system, and connector interface for authenticating an accessory. The method includes performing a first authentication operation on the accessory by the media player, where an authentication certificate is validated; and performing a second authentication operation on the accessory by the media player, where an authentication signature is validated. According to the system and method disclosed herein, the media player and accessory may utilize a plurality of commands in a variety of environments such as within a connector interface system environment to control access to the media player.

Claims

1. A method usable by a media player to communicate with an accessory configured to interact with the media player according to a media player accessory protocol that defines a plurality of application commands to invoke a plurality of media player application functions, the method comprising:

initiating an authentication operation to authenticate the accessory;

sending a request to the accessory requesting first authentication information;

receiving the first authentication information from the accessory;

validating the first authentication information;

during the authentication operation, receiving one of the plurality of application commands of the media player accessory protocol from the accessory based on validation of the first authentication information and, in response to the received application command, invoking one of the plurality of media player application functions;

receiving second authentication information from the accessory, the second authentication information being different from the first authentication information;

determining whether the authentication operation completed successfully or failed based on validation of the second authentication information;

in the event that the authentication operation completed successfully, receiving a subsequent one of the plurality of application commands from the accessory and, in response to the subsequent application command, invoking a subsequent one of the plurality of media player application functions; and

in the event that the authentication operation failed, ignoring any subsequent application command received from the accessory.

2. The method of claim 1 wherein the first authentication information includes one or more of:

an authentication certificate, an authentication major version information, and an authentication minor version information.

3. The method of claim 2 further comprising:

receiving a device identification message from the accessory, the device identification message including an indication of a command set supported by the accessory, the supported command set including at least some of the plurality of commands defined by the media player accessory protocol;

determining an allowed command set for the accessory based on the authentication information included in the authentication certificate; and

comparing the allowed command set to the supported command set,

wherein the authentication operation fails in the event that the allowed command set does not match the supported command set.

4. The method of claim 2 wherein the second authentication information comprises:

a digital signature that includes a digitally signed version of a random challenge transmitted to the accessory by the media player.

5. The method of claim 4 wherein the digitally signed version of the random challenge is signed by the accessory using a private key and wherein the method further comprises:

extracting a public key from the authentication certificate; and

using the public key to validate the digital signature.

6. The method of claim 1 further comprising:

receiving a device identification message from the accessory, the device identification message including an indication of a command set supported by the accessory, the command set including at least some of the plurality of commands defined by the media player accessory protocol,

wherein during the authentication operation, one of the plurality of application commands is one of the commands in the command set supported by the accessory.

7. The method of claim 1 further comprising:

receiving a device identification message from the accessory, the device identification message including an indication of a command set supported by the accessory, the command set including at least some of the plurality of commands defined by the media player accessory protocol, wherein the command set includes a first command that relates to a risky behavior and a second command that relates to a non risky behavior,

wherein if the second command is received prior to validation of the second authentication information, the media player invokes a corresponding media player application function but if the first command is received prior to validation of the second authentication information, the media player ignores the first command.

8. The method of claim 1 wherein

in the event that an error occurs during the authentication operation, retrying the authentication operation if a timeout period has not ended.

9. The method of claim 8 wherein retrying the authentication includes updating a count of retries and wherein the authentication operation fails in the event that the count of retries exceeds a retry limit.

10. The method of claim 1 wherein if the authentication operation fails a notification is provided to the user of the media player, and wherein the notification includes a message displayed on a display screen of the media player.

11. The method according to claim 1 wherein the media player application functions include a function associated with processing at least one of voice data, video data, or other data.

12. A method usable by an accessory to interact with a media player according to a media player accessory protocol that defines a plurality of application commands to invoke a plurality of media player application functions, the method comprising:

receiving an authentication request from the media player, the authentication request initiating an authentication operation;

transmitting first authentication information to the media player in response to the authentication request, the first authentication information being usable by the media player in the authentication operation;

sending at least one of the plurality of application commands to the media player based on validation of the first authentication information and prior to completion of the authentication operation, wherein the media player processes the at least one application command, thereby allowing the accessory to invoke at least one of the plurality of media player application functions during the authentication operation; and

transmitting second authentication information different from the first authentication information to the media player for validation, wherein the authentication operation completes upon validation of the second authentication information, and wherein if the authentication operation fails, any subsequent application commands sent by the accessory are not processed by the media player.

13. The method according to claim 12 wherein the plurality of application commands defined by the media player accessory protocol includes commands to transfer and store information between the media player and the accessory.

14. The method according to claim 12 wherein the plurality of application commands defined by the media player accessory protocol includes a command associated with the processing of at least one of voice, video, or other data between the media player and the accessory.

15. A method usable by an accessory to interact with a media player according to a media player accessory protocol that defines a plurality of application commands to invoke a plurality of media player application functions, the plurality of media player application functions including a first function associated with a risky behavior and a second function associated with a non-risky behavior, the method comprising:

receiving an authentication request from the media player, the authentication request initiating an authentication operation;

transmitting first authentication information to the media player in response to the authentication request, the first authentication information being usable by the media player in the authentication operation;

sending at least one of the plurality of application commands to the media player prior to completion of the authentication operation based on validation of the first authentication information, wherein in response to the at least one application command, the media player invokes an associated one of the plurality of media player application functions if the associated one of the plurality of media player application functions is the second function but does not invoke the associated one of the plurality of media player application functions if the associated one of the plurality of media player application functions is the first function; and

transmitting an second authentication signature to the media player for validation, wherein the authentication operation completes upon validation of the authentication signature, the authentication signature being different from the first authentication information;

and wherein if the authentication operation fails, any subsequent commands sent by the accessory are ignored by the media player.

16. The method according to claim 15 wherein the media player application functions include a function to transfer and store information between the media player and the accessory.

17. The method according to claim 15 wherein the media player application functions include functions associated with the processing of voice, video, and other data between the media player and the accessory.

18. The method of claim 15 further comprising:

after completion of the authentication operation, sending a subsequent application command to invoke the first function,

wherein if the authentication operation completed successfully, the media player invokes the first function in response to the subsequent application command.

19. The method of claim 15 wherein the first function is a function related to downloading executable media onto the media player.

20. The method of claim 15 wherein the first function is a function related to performing a firmware update on the media player.