IP Library Granted Patent US 9,654,460
Granted Patent B2
US 9,654,460 · App. 15/187,064 · Granted May 16, 2017

Methods, systems, and media for providing access control for a computing device

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,654,460
App. No.
15/187,064
Granted
May 16, 2017
Kind
B2
Abstract

Methods, systems, and media for providing access control for a computing device are provided. In some implementations, methods for providing access control for a computing device are provided, the methods comprising: receiving a first request to authenticate the computing device from a first sender device; authenticating the computing device based at least in part on the first request; transmitting a session identifier and a session key to the first sender device; receiving an application identifier associated with the sender device from the computing device; determining, using a hardware processor, whether a sender application executing on the sender device is valid based at least in part on the application identifier; and transmitting the session key to the computing device in response to determining that the sender application is valid.

Claims (67)

1. A method for providing access control by a server for a computing device, the method comprising:

receiving, at the server, a first request to authenticate the computing device from a first sender device, wherein the request includes an application identifier to identify an application executing on the first sender device;

authenticating the computing device based at least in part on the first request;

transmitting a session identifier and a session key to the first sender device;

receiving the application identifier associated with the first sender device from the computing device;

determining, using a hardware processor, whether a sender application executing on the first sender device is valid based at least in part on the application identifier; and

transmitting the session key to the computing device in response to determining that the sender application is valid to establish secure communications between the first sender device and the computing device.

2. The method of claim 1 , further comprising:

receiving, from the computing device, a session token associated with the session key and the session identifier; and

authenticating the computing device based at least in part on the session token.

3. The method of claim 1 , wherein the first request to authenticate the computing device comprises a certificate associated with the computing device.

4. The method of claim 3 , further comprising authenticating the computing device by validating the certificate associated with the computing device.

5. The method of claim 3 , further comprising:

receiving a second request to authenticate the computing device from a second sender device, wherein the second request comprises the certificate associated with the computing device; and

transmitting the session key and the session identifier to the second computing device in response to determining that the second sender device is associated with the application identifier.

6. The method of claim 5 , wherein the second request comprises the application identifier.

7. The method of claim 1 , wherein the first request to authenticate the computing device comprises a first digital signature generated by the computing device.

8. The method of claim 7 , further comprising authenticating the computing device by verifying the first digital signature.

9. The method of claim 8 , further comprising:

receiving a second digital signature from the computing device; and

determining whether the computing device is a valid receiver based at least in part on the second digital signature.

10. The method of claim 1 , wherein the computing device is a digital media receiver.

11. A system for providing access control for a computing device, the system comprising:

a server comprising at least a hardware processor that is configured to:

receive a first request to authenticate the computing device from a first sender device, wherein the request includes an application identifier to identify an application executing on the first sender device;

authenticate the computing device based at least in part on the first request;

transmit a session identifier and a session key to the first sender device;

receive the application identifier associated with the first sender device from the computing device;

determine whether a sender application executing on the first sender device is valid based at least in part on the application identifier; and

transmit the session key to the computing device in response to determining that the sender application is valid to establish secure communications between the first sender device and the computing device.

12. The system of claim 11 , wherein the hardware processor is further configured to:

receive, from the computing device, a session token associated with the session key and the session identifier; and

authenticate the computing device based at least in part on the session token.

13. The system of claim 11 , wherein the first request to authenticate the computing device comprises a certificate associated with the computing device.

14. The system of claim 13 , wherein the hardware processor is further configured to authenticate the computing device by validating the certificate associated with the computing device.

15. The system of claim 13 , wherein the hardware processor is further configured to:

receive a second request to authenticate the computing device from a second sender device, wherein the second request comprises the certificate associated with the computing device; and

transmit the session key and the session identifier to the second computing device in response to determining that the second sender device is associated with the application identifier.

16. The system of claim 15 , wherein the second request comprises the application identifier.

17. The system of claim 11 , wherein the first request to authenticate the computing device comprises a first digital signature generated by the computing device.

18. The system of claim 17 , wherein the hardware processor is further configured to authenticate the computing device by verifying the first digital signature.

19. The system of claim 18 , wherein the hardware processor is further configured to:

receive a second digital signature from the computing device; and

determine whether the computing device is a valid receiver based at least in part on the second digital signature.

20. The system of claim 11 , wherein the computing device is a digital media receiver.

21. A non-transitory computer-readable medium containing computer-executable instructions that, when executed by a processor, cause the processor to perform a method for providing access control by a server for a computing device, the method comprising:

receiving, at a server, a first request to authenticate the computing device from a first sender device, wherein the request includes an application identifier to identify an application executing on the first sender device;

authenticating by the server the computing device based at least in part on the first request;

transmitting a session identifier and a session key to the first sender device;

receiving the application identifier associated with the first sender device from the computing device;

determining whether a sender application executing on the first sender device is valid based at least in part on the application identifier; and

transmitting the session key to the computing device in response to determining that the sender application is valid to establish secure communications between the first sender device and the computing device.

22. The non-transitory computer-readable medium of claim 21 , wherein the method further comprises:

receiving, from the computing device, a session token associated with the session key and the session identifier; and

authenticating the computing device based at least in part on the session token.

23. The non-transitory computer-readable medium of claim 21 , wherein the first request to authenticate the computing device comprises a certificate associated with the computing device.

24. The non-transitory computer-readable medium of claim 23 , wherein the method further comprises authenticating the computing device by validating the certificate associated with the computing device.

25. The non-transitory computer-readable medium of claim 23 , wherein the method further comprises:

receiving a second request to authenticate the computing device from a second sender device, wherein the second request comprises the certificate associated with the computing device; and

transmitting the session key and the session identifier to the second computing device in response to determining that the second sender device is associated with the application identifier.

26. The non-transitory computer-readable medium of claim 25 , wherein the second request comprises the application identifier.

27. The non-transitory computer-readable medium of claim 21 , wherein the first request to authenticate the computing device comprises a first digital signature generated by the computing device.

28. The non-transitory computer-readable medium of claim 27 , wherein the method further comprises authenticating the computing device by verifying the first digital signature.

29. The non-transitory computer-readable medium of claim 28 , wherein the method further comprises:

receiving a second digital signature from the computing device; and

determining whether the computing device is a valid receiver based at least in part on the second digital signature.

30. The non-transitory computer-readable medium of claim 21 , wherein the computing device is a digital media receiver.

Assignments (1)
CHANGE OF NAME Recorded Dec 5, 2017
From: GOOGLE INC.
To: GOOGLE LLC
Reel/Frame 044695/0115 →