Accessory authentication for electronic devices

• US 9,223,958 B2
• Filed: 06/23/2014
• Issued: 12/29/2015
• Est. Priority Date: 01/07/2005
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Rubinstein, Jonathan J., Fadell, Anthony M., Dorogusker, Jesse Lee, Mitchell, Adler, Archibald, John Wesley
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Korsak, Oleg
• Application Number:
  US14/312,672
• Publication Number:
  US 20150082049A1
• Time in Patent Office: 554 Days
• Field of Search: 726/2, 726/17, 726/34
• US Class Current: 1/1
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

Improved techniques to control utilization of accessory devices with electronic devices are disclosed. The improved techniques can use cryptographic approaches to authenticate electronic devices, namely, electronic devices that interconnect and communicate with one another. One aspect pertains to techniques for authenticating an electronic device, such as an accessory device. Another aspect pertains to provisioning software features (e.g., functions) by or for an electronic device (e.g., a host device). Different electronic devices can, for example, be provisioned differently depending on different degrees or levels of authentication, or depending on manufacturer or product basis. Still another aspect pertains to using an accessory (or adapter) to convert a peripheral device (e.g., USB device) into a host device (e.g., USB host). The improved techniques are particularly well suited for electronic devices, such as media devices, that can receive accessory devices. One example of a media device is a media player, such as a hand-held media player (e.g., music player), that can present (e.g., play) media items (or media assets).

Claims

1. An electronic system comprising:

an accessory comprising;

a first memory to store a device identifier and to provide the device identifier;

a processor coupled to the memory to receive the device identifier from the first memory and to provide the device identifier to a communication bus; and

a connector to provide a path for the communication bus; and

a mobile computing device comprising;

a connector to provide a path for the communication bus;

a port interface coupled to the connector to receive the device identifier from the accessory over the communication bus;

an authorization table comprising a list of device identifiers and corresponding sets of authorized features; and

an authentication module coupled to the port interface to receive the device identifier from the accessory, the authorization module further coupled to the authorization table to find a match for the device identifier from the accessory in the list of device identifiers and to find a corresponding set of authorized features, and then to allow the accessory to access features of the mobile computing device identified by the corresponding set of authorized features.

2. The electronic system of claim 1 wherein when the accessory does not provide a device identifier to the mobile computing device, the mobile computing device allows the accessory access to a limited set of features of the mobile computing device.

3. The electronic system of claim 1 wherein the authorization table comprises a first device identifier corresponding to a first manufacturer, along with a corresponding first set of authorized features, and a second device identifier corresponding to a second manufacturer, along with a corresponding second set of authorized features, wherein the first set of authorized features is different than the second set of authorized features.

4. The electronic system of claim 1 wherein the device identifier from the accessory identifies a manufactures of the accessory.

5. The electronic system of claim 1 wherein the first memory further stores a private key and the authorization table further comprises a public key for each of the device identifiers in the list of device identifiers.

6. The electronic system of claim 1 wherein the connector on the mobile computing device connects to the connector on the accessory through a cable.

7. The electronic system of claim 6 wherein the port interface provides power to the accessory.

8. An accessory comprising:

a first memory to store a device identifier and to provide the device identifier;

a processor coupled to the memory to receive the device identifier from the first memory and to provide the device identifier to a communication bus; and

a connector to provide a path for the communication bus to provide the device identifier from the accessory to a mobile computing device, the device identifier from the accessory usable by an authorization module in the mobile computing device to find a match for the device identifier from the accessory in a list of device identifiers in an authorization table and to find a corresponding set of authorized features in the authorization table, and then to allow the accessory to access the corresponding set of authorized features.

9. The accessory of claim 8 wherein when the accessory does not provide a device identifier to the mobile computing device, the mobile computing device allows the accessory access to a limited set of features.

10. The accessory of claim 8 wherein the authorization table comprises a first device identifier corresponding to a first manufacturer, along with a corresponding first set of authorized features, and a second device identifier corresponding to a second manufacturer, along with a corresponding second set of authorized features, wherein the first set of authorized features is different than the second set of authorized features.

11. The accessory of claim 8 wherein the device identifier provided by the accessory identifies a manufactures of the accessory.

12. The accessory of claim 8 wherein the first memory further stores a private key and the authorization table further comprises a public key for each of the device identifiers in the list of device identifiers.

13. The accessory of claim 8 wherein a connector on the mobile computing device connects to the connector on the accessory through a cable.

14. The accessory of claim 13 wherein the accessory receives power from the mobile computing device.

15. A mobile computing device comprising:

a connector to provide a path for the communication bus;

a port interface coupled to the connector to receive a device identifier from the accessory over the communication bus;

an authorization table comprising a list of device identifiers and a corresponding set of authorized features; and

an authentication module coupled to the port interface to receive the device identifier from the accessory, the authorization module further coupled to the authorization table to find a match for the device identifier from the accessory in the list of device identifiers and to find a corresponding set of authorized features, and then to allow the accessory to access the corresponding set of authorized features.

16. The mobile computing device of claim 15 wherein when the accessory does not provide a device identifier to the mobile computing device, the mobile computing device allows the accessory access to a limited set of features.

17. The mobile computing device of claim 15 wherein the authorization table comprises a first device identifier corresponding to a first manufacturer, along with a corresponding first set of authorized features, and a second device identifier corresponding to a second manufacturer, along with a corresponding second set of authorized features, wherein the first set of authorized features is different than the second set of authorized features.

18. The mobile computing device of claim 15 wherein the device identifier from the accessory identifies a manufactures of the accessory.

19. The mobile computing device of claim 15 wherein the authorization table further comprises a public key for each of the device identifiers in the list of device identifiers.

20. The mobile computing device of claim 15 wherein the connector on the mobile computing device connects to a connector on the accessory through a cable.