Granted Patent B2

US 9,391,966 · App. 13/790,538 · Granted Jul 12, 2016

Abstract

Claims (46)

1. A method for providing secure remote access by a controller, comprising:

sending one or more endpoint requests;

receiving authentication service endpoint information and connection service endpoint information;

requesting authentication based on the authentication service endpoint information, wherein requesting authentication comprises requesting license validation;

receiving, based at least upon the authentication request, a controller session token including at least a unique identifier associated with the controller;

sending one or more registration messages based on the connection service endpoint information, the one or more registration messages including at least an internal and an external internet protocol (IP) address associated with the controller and the controller session token, wherein registering with a connection service allows port forwarding to be avoided;

receiving a session request, wherein receiving the session request is based on the controller session token, and wherein the session request comprises device candidate link information and a device session token;

determining controller candidate link information, wherein the controller candidate link information comprises an internet protocol (IP) address and a port;

sending the controller candidate link information; and

receiving an automation message based on the controller candidate link information, the automation message including at least one or more instructions to initiate one or more automation tasks.

2. The method of claim 1 , wherein receiving the automation message comprises receiving the automation message via at least one of a relay link and a peer-to-peer link.

3. A method for providing secure remote access to a controller by an electronic device, comprising:

sending one or more endpoint requests;

receiving authentication service endpoint information and connection service endpoint information;

requesting authentication based on the authentication service endpoint information, wherein requesting authentication comprises requesting license validation based on electronic device credentials;

receiving, based upon the authentication request, a device session token;

sending a session request based on the connection service endpoint information, the session request including at least device candidate link information, the device session token and an internet protocol (IP) address associated with the electronic device, wherein using a connection service allows port forwarding to be avoided;

receiving controller candidate link information, wherein the controller candidate link information comprises an internet protocol (IP) address and a port; and

sending an automation message based on the controller candidate link information, the automation message including at least one or more instructions to initiate one or more automation tasks.

4. The method of claim 3 , wherein sending the automation message comprises sending the automation message via at least one of a relay link and a peer-to-peer link.

5. A controller for providing secure remote access, comprising:

a processor;

memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to:

send one or more endpoint requests;

receive authentication service endpoint information and connection service endpoint information;

request authentication based on the authentication service endpoint information, wherein requesting authentication comprises requesting license validation;

receive, based at least upon the authentication request, a controller session token including at least a unique identifier associated with the controller;

send one or more registration messages based on the connection service endpoint information, the one or more registration messages including at least an internal and external internet protocol (IP) address associated with the controller and the controller session token, wherein registering with a connection service allows port forwarding to be avoided;

receive a session request, wherein receiving the session request is based on the controller session token, and wherein the session request comprises device candidate link information and a device session token;

determine controller candidate link information, wherein the controller candidate link information comprises an internet protocol (IP) address and a port;

send the controller candidate link information; and

receive an automation message based on the controller candidate link information, the automation message including at least one or more instructions to initiate one or more automation tasks.

6. The controller of claim 5 , wherein receiving the automation message comprises receiving the automation message via at least one of a relay link and a peer-to-peer link.

7. An electronic device for providing secure remote access to a controller, the electronic device comprising:

a processor;

memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to:

send one or more endpoint requests;

receive authentication service endpoint information and connection service endpoint information;

request authentication based on the authentication service endpoint information, wherein requesting authentication comprises requesting license validation based on electronic device credentials;

receive, based at least upon the authentication request, a device session token;

send a session request based on the connection service endpoint information, the session request including at least device candidate link information, the device session token and an internet protocol (IP) address of the electronic device, wherein using a connection service allows port forwarding to be avoided;

receive controller candidate link information, wherein the controller candidate link information comprises an internet protocol (IP) address and a port; and

send an automation message based on the controller candidate link information, the automation message including at least one or more instructions to initiate one or more automation tasks.

8. The electronic device of claim 7 , wherein sending the automation message comprises sending the automation message via at least one of a relay link and a peer-to-peer link.

Assignments (9)