Method and system for authenticating an accessory

• US 8,590,036 B2
• Filed: 01/10/2012
• Issued: 11/19/2013
• Est. Priority Date: 06/27/2006
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Novotney, Donald J., Filson, John B., Tupman, David, Lydon, Gregory T.
• Primary Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US13/347,511
• Publication Number:
  US 20130014247A1
• Time in Patent Office: 679 Days
• Field of Search: None
• US Class Current: 726/16
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H01R 13/6456 comprising keying elements at different positions along the periphery of the connector
• CPC Class Codes: H01R 2103/00 Two poles
• CPC Class Codes: H01R 24/58 Contacts spaced along longitudinal axis of engagement
• CPC Class Codes: H01R 27/00 Coupling parts adapted for co-operation with two or more dissimilar counterparts for dissimilar contact members H01R13/35; supported only by co-operation with a counterpart H01R31/00; with a holder adapted for supporting apparatus to which its counterpart is attached H01R33/90
• CPC Class Codes: H01R 31/06 Intermediate parts for linking two coupling parts, e.g. adapter with a holder adapted for supporting apparatus to which its counterpart is attached H01R33/94
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method, system, and connector interface for authenticating an accessory, the method includes performing a first authentication operation on the accessory by the media player, where an authentication certificate is validated; and performing a second authentication operation on the accessory by the media player, where an authentication signature is validated. According to the system and method disclosed herein, the media player and accessory may utilize a plurality of commands utilized in a variety of environments such as within a connector interface system environment to control access to the media player.

Claims

1. A media player comprising:

a processor; and

an accessory interface coupled to the processor and configured to communicate with an accessory according to a media player accessory protocol that defines a plurality of application commands to invoke a plurality of media player application functions,

wherein the processor in conjunction with the accessory interface is configured to;

initiate an authentication operation to authenticate the accessory;

receive first authentication information from the accessory;

validate the first authentication information;

receive one of the plurality of application commands of the media player accessory protocol from the accessory based on validation of the first authentication information;

in response to the received application command, invoke one of the plurality of media player application functions;

receive second authentication information from the accessory, the second authentication information being different from the first authentication information;

validate the second authentication information to determine that authentication operation completed successfully; and

receive a subsequent one of the plurality of application commands from the accessory and, in response to the subsequent application command, invoke a subsequent one of the plurality of media player application functions.

2. The media player of claim 1 wherein the processor is further configured to ignore any subsequent application command received from the accessory if the authentication operation fails.

3. The media player of claim 1 wherein the first authentication information includes one or more of:

an authentication certificate, an authentication major version information, and an authentication minor version information.

4. The media player of claim 3 wherein the processor is further configured to:

receive a device identification message from the accessory, the device identification message including an indication of a command set supported by the accessory, the supported command set including at least some of the plurality of commands defined by the media player accessory protocol;

determine an allowed command set for the accessory based on the authentication information included in the authentication certificate; and

compare the allowed command set to the supported command set,

wherein the authentication operation fails in the event that the allowed command set does not match the supported command set.

5. The media player of claim 3 wherein the second authentication information comprises a digital signature that includes a digitally signed version of a random challenge transmitted to the accessory by the media player.

6. The media player of claim 5 wherein the digitally signed version of the random challenge is signed by the accessory using a private key and wherein the processor is configured to:

extract a public key from the authentication certificate; and

use the public key to validate the digital signature.

7. The media player of claim 1 wherein the processor is further configured to:

receive a device identification message from the accessory, the device identification message including an indication of a command set supported by the accessory, the command set including at least some of the plurality of commands defined by the media player accessory protocol,

wherein during the authentication operation, one of the plurality of application commands is one of the commands in the command set supported by the accessory.

8. The media player of claim 1 wherein the processor is further configured to:

receive a device identification message from the accessory, the device identification message including an indication of a command set supported by the accessory, the command set including at least some of the plurality of commands defined by the media player accessory protocol, wherein the command set includes a first command that relates to a risky behavior and a second command that relates to a non risky behavior,

wherein if the second command is received prior to validation of the second authentication information, the media player invokes a corresponding media player application function but if the first command is received prior to validation of the second authentication information, the media player ignores the first command.

9. The media player of claim 1 wherein in the event that an error occurs during the authentication operation, the processor is configured to retry the authentication operation if a timeout period has not ended.

10. The media player of claim 9 wherein the processor is further configured to update a count of retries and wherein the authentication operation fails in the event that the count of retries exceeds a retry limit.

11. The media player of claim 1 wherein if the authentication operation fails, the processor is configured to provide a notification to a user of the media player, and wherein the notification includes a message displayed on a display screen of the media player.

12. A media player comprising:

a processor; and

an accessory interface coupled to the processor and configured to communicate with an accessory according to a media player accessory protocol that defines a plurality of application commands to invoke a plurality of media player application functions, the plurality of media player application functions including a first function associated with a risky behavior and a second function associated with a non-risky behavior,

wherein the processor is configured to;

receive first authentication information from the accessory in response to an authentication request, the first authentication information being usable by the media player in the authentication operation;

receive at least one of the plurality of application commands from the accessory prior to completion of the authentication operation based on validation of the first authentication information;

in response to the at least one application command, invoke an associated one of the plurality of media player application functions if the associated one of the plurality of media player application functions is the second function but not invoke the associated one of the plurality of media player application functions if the associated one of the plurality of media player application functions is the first function; and

receive an authentication signature from the accessory for validation, wherein the authentication operation completes upon validation of the authentication signature, the authentication signature being different from the first authentication information.

13. The media player of claim 12 wherein if the authentication operation fails, the processor is configured to ignore any subsequent commands received from the accessory.

14. The media player of claim 12 wherein the plurality of media player application functions include a function associated with processing at least one of:

voice data, video data, or other data.

15. The media player of claim 12 wherein the first function is a function related to downloading executable media onto the media player.

16. The media player of claim 12 wherein the first function is a function related to performing a firmware update on the media player.

17. An accessory comprising:

a controller; and

a media player interface coupled to the controller and configured to communicate with a media player according to a media player accessory protocol that defines a plurality of application commands to invoke a plurality of media player application functions,

wherein the controller is configured to;

receive an authentication request from the media player, the authentication request initiating an authentication operation;

transmit first authentication information to the media player in response to the authentication request,

send at least one of the plurality of application commands to the media player based on validation of the first authentication information and prior to completion of the authentication operation, wherein the media player processes the at least one application command, thereby allowing the accessory to invoke at least one of the plurality of media player application functions during the authentication operation; and

transmit second authentication information different from the first authentication information to the media player for validation, wherein the authentication operation completes upon validation of the second authentication information, and wherein if the authentication operation fails, any subsequent application commands sent by the accessory are not processed by the media player.

18. The accessory of claim 17 wherein the application commands defined by the media player accessory protocol includes commands to transfer and store information between the media player and the accessory.

19. The accessory of claim 17 wherein the application commands defined by the media player accessory protocol includes a command associated with processing of at least one of voice, video, or other data between the media player and the accessory.

20. An accessory comprising:

a controller; and

a media player interface coupled to the controller and configured to communicate with a media player according to a media player accessory protocol that defines a plurality of application commands to invoke a plurality of media player application functions, the plurality of media player application functions including a first function associated with a risky behavior and a second function associated with a non-risky behavior,

wherein the controller is configured to;

receive an authentication request from the media player, the authentication request initiating an authentication operation;

send first authentication information to the media player in response to the authentication request, the first authentication information being usable by the media player in the authentication operation;

send at least one of the plurality of application commands to the media player prior to completion of the authentication operation based on validation of the first authentication information, wherein in response to the at least one application command, the media player invokes an associated one of the plurality of media player application functions if the associated one of the plurality of media player application functions is the second function but does not invoke the associated one of the plurality of media player application functions if the associated one of the plurality of media player application functions is the first function;

send an authentication signature to the media player for validation, wherein the authentication operation completes upon validation of the authentication signature, the authentication signature being different from the first authentication information; and

wherein if the authentication operation fails, any subsequent commands sent by the accessory are ignored by the media player.

21. The accessory of claim 20 wherein the plurality of media player application functions include a function to transfer and store information between the media player and the accessory.

22. The accessory of claim 20 wherein the first function is a function related to downloading executable media onto the media player.

23. The accessory of claim 20 wherein the first function is a function related to performing a firmware update on the media player.

24. The accessory of claim 20 wherein the media player application functions include functions associated with the processing of voice, video, and other data between the media player and the accessory.

25. The accessory of claim 20 wherein after completion of the authentication operation, the controller is configured to send a subsequent application command to invoke the first function, wherein if the authentication operation completed successfully, the media player invokes the first function in response to the subsequent application command.