Method for configuring access for a limited user interface (UI) device

1. A method, operable with a computing device in a local area network comprising a wireless LAN, to configure access for a limited user interface (UI) device to a network service across a secure link in the local area network via a local network access point in the local area network, the method comprising,

employing a User Communication Device as a gateway between the limited UI device and a remote server providing the remote service, including the steps of the User Communication Device:

obtaining from the limited UI device a device identifier via an out-of-band channel;

providing said device identifier to said network service via a secure network link; receiving from the network service a zero knowledge proof (ZKP) challenge;

providing configuration information to said limited UI device also via an out-of-band channel, said configuration information including information sufficient to enable said limited UI device to connect to said local network access point;

providing the ZKP challenge to said limited UI device also via an out-of-band channel;

receiving a secure channel key from said network service indicating a successful response from said limited UI device to said ZKP challenge; and

providing said secure channel key to said limited UI device enabling said limited UI device to access said network service.

2. A method, operable by a limited user interface (UI) device in a local area network comprising a wireless LAN, for gaining access to a network service across a secure link in the local area network via a local access point in the local area network, the method comprising,

interfacing with a User Communication Device operating as a gateway between the limited UI device and a remote server providing the remote service, including the steps of the User Communication Device:

providing a device identifier to the User Communication Device via an out-of-band channel;

receiving configuration information from the User Communication Device also via an out-of-band channel, said configuration information including information sufficient to enable the limited UI device to connect to said local network access point;

receiving a ZKP challenge also via an out-of-band channel;

connecting to said local network using said configuration information;

providing to said network service a response to said ZKP challenge;

receiving from said computing device a secure channel key indicating a successful response to said ZKP challenge; and

establishing a secure channel to said network service using said secure channel key.

3. A method according to claim 1 wherein the out-of-band channel by which the device identifier is obtained, or by which the device identifier is provided, comprises: an audio link, a visual link, an NFC link, a link for transmitting an RFID, or a Bluetooth link.

4. A method according to claim 1 wherein the out-of-band channel by which the device identifier is obtained is a first out-of-band channel and the out-of-band channel by which the configuration information is provided to said limited DI device is a second out-of-band channel comprising: an audio link, a visual link, an NFC link, or a Bluetooth link.

5. A method according to claim 1 wherein said providing said secure channel key to said limited UI device comprises providing said secure channel key via an out-of-band channel.

6. A method according to claim 1 wherein said secure network link comprises a secure HTTP link.

7. A method according to claim 1 wherein said network service is a Key-chained Cloud Service (KCS).

8. A method according to claim 1 further comprising authenticating a user of said computing device prior to establishing said secure network link.

9. A method according to claim 1 further comprising:

receiving from the network service at least one further ZKP challenge; and

providing the at least one further ZKP challenge to said limited UI device via an out-of-band channel,

wherein receiving said secure channel key from said network service indicates a successful response from said limited UI device to said each of said ZKP challenges.

10. A method according to claim 1 said ZKP challenge is provided via an out-of-band channel along with a response URL.

11. A method according to claim 1 wherein the ZKP challenge is based on the device identifier.

12. A computing device comprising a processor configured to perform the method of claim 1 and comprising any one of: smartphone, tablet computer, laptop computer.

13. A client device comprising a processor configured to perform the method of claim 2 and comprising any one of a network enabled: bulb, sensor or camera.

14. The method of claim 2 wherein the steps of interfacing with a User Communication Device, providing the device identifier, receiving configuration information, and receiving the ZKP challenge are performed with multiple out-of-band channels.

15. A non-transient computer readable medium comprising computer executable instructions, which instructions when executed on a computing device, cause the computing device to perform the method of claim 1 .

16. A method according to claim 2 wherein said first out-of-band channel comprises: an audio link, a visual link, an NFC link, a link for transmitting an RFID, a Bluetooth link or a WiFi direct link.

17. A method according to claim 2 wherein the out-of-band channel by which the device identifier is provided is a first out-of-band channel and the out-of-band channel by which the configuration information is received is a second out-of-band channel comprising: an audio link, a visual link, an NFC link, or a Bluetooth link.

18. A method according to claim 2 said ZKP challenge is provided via an out-of-band channel along with a response URL.

19. A method according to claim 2 wherein the ZKP challenge is based on the device identifier.

20. A non-transient computer readable medium comprising computer executable instructions, which instructions when executed on a computing device, cause the computing device to perform the method of claim 2 .