IP Library Granted Patent US 9,917,836
Granted Patent B2
US 9,917,836 · App. 15/593,028 · Granted Mar 13, 2018

Methods, systems, and media for providing access control for a computing device

Inventors: Majd Bakar (San Jose, CA); Francis Tsui (Belmont, CA); Bryan Bradley Eyler (Sunnyvale, CA)
Assignee: Google LLC
H04L63/0892H04L9/3247H04L63/062H04L63/0807H04L63/0823H04L63/10H04L63/123H04L67/125
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,917,836
App. No.
15/593,028
Granted
Mar 13, 2018
Kind
B2
Abstract

Methods, systems, and media for providing access control for a computing device are provided. In some implementations, methods for providing access control for a computing device are provided, the methods comprising: receiving a first request to authenticate the computing device from a first sender device; authenticating the computing device based at least in part on the first request; transmitting a session identifier and a session key to the first sender device; receiving an application identifier associated with the sender device from the computing device; determining, using a hardware processor, whether a sender application executing on the sender device is valid based at least in part on the application identifier; and transmitting the session key to the computing device in response to determining that the sender application is valid.

Claims (49)

1. A method for providing access control for a computing device, the method comprising:

receiving, at a server, a request to authenticate the computing device from a sender device, wherein the request includes an application identifier associated with an application executing on the sender device;

authenticating the computing device in response to receiving the request;

transmitting a session key to the sender device in response to determining that the computing device is valid;

determining, at the server, whether the application executing on the sender device is valid based on the application identifier further received from the computing device; and

transmitting the session key to the computing device in response to determining that the sender application is valid to facilitate secure communication between the sender device and the computing device using the session key.

2. The method of claim 1 , wherein the computing device is a digital media receiver.

3. The method of claim 1 , wherein the application identifier identifies the application executing on the sender device.

4. The method of claim 1 , further comprising receiving, from the computing device, the application identifier associated with the application executing on the sender device after the sender device transmits a launch request to the computing device.

5. The method of claim 1 , wherein the request to authenticate the computing device includes a session token associated with the session key and wherein the computing device is authenticated based at least in part on the session token.

6. The method of claim 1 , wherein the request to authenticate the computing device includes a certificate associated with the computing device and wherein the computing device is authenticated by validating the certificate associated with the computing device, and wherein the method further comprises:

receiving an additional request to authenticate the computing device from a different sender device, wherein the additional request comprises the certificate associated with the computing device; and

transmitting the session key and a session identifier to the computing device in response to determining that the different sender device is associated with the application identifier.

7. The method of claim 1 , wherein the request to authenticate the computing device comprises a digital signature generated by the computing device and wherein the computing device is authenticated by verifying the digital signature.

8. The method of claim 1 , further comprising:

determining whether the computing device is a valid receiver; and

in response to determining that the computing device is the valid receiver, transmitting a response message to the sender device indicating that the computing device is the valid receiver.

9. The method of claim 1 , further comprising:

determining whether an authorized control session is associated with the sender device; and

retrieving the session key associated with the authorized control session.

10. The method of claim 1 , further comprising transmitting a response message to the computing device indicating that the application identifier identifies an invalid sender application in response to determining that the application identifier associated with the sender application executing on the sender device is invalid.

11. A system for providing access control for a computing device, the system comprising:

a server comprising at least a hardware processor that is configured to:

receive a request to authenticate the computing device from a sender device, wherein the request includes an application identifier associated with an application executing on the sender device;

authenticate the computing device in response to receiving the request;

transmit a session key to the sender device in response to determining that the computing device is valid;

determine whether the application executing on the sender device is valid based on the application identifier further received from the computing device; and

transmit the session key to the computing device in response to determining that the sender application is valid to facilitate secure communication between the sender device and the computing device using the session key.

12. The system of claim 11 , wherein the computing device is a digital media receiver.

13. The system of claim 11 , wherein the application identifier identifies the application executing on the sender device.

14. The system of claim 11 , wherein the hardware processor is further configured to receive, from the computing device, the application identifier associated with the application executing on the sender device after the sender device transmits a launch request to the computing device.

15. The system of claim 11 , wherein the request to authenticate the computing device includes a session token associated with the session key and wherein the computing device is authenticated based at least in part on the session token.

16. The system of claim 11 , wherein the request to authenticate the computing device includes a certificate associated with the computing device and wherein the computing device is authenticated by validating the certificate associated with the computing device and wherein the hardware processor is further configured to:

receive an additional request to authenticate the computing device from a different sender device, wherein the additional request comprises the certificate associated with the computing device; and

transmit the session key and a session identifier to the computing device in response to determining that the different sender device is associated with the application identifier.

17. The system of claim 11 , wherein the request to authenticate the computing device comprises a digital signature generated by the computing device and wherein the computing device is authenticated by verifying the digital signature.

18. The system of claim 11 , wherein the hardware processor is further configured to:

determine whether the computing device is a valid receiver; and

in response to determining that the computing device is the valid receiver, transmit a response message to the sender device indicating that the computing device is the valid receiver.

19. The system of claim 11 , wherein the hardware processor is further configured to:

determine whether an authorized control session is associated with the sender device; and

retrieve the session key associated with the authorized control session.

20. The system of claim 11 , wherein the hardware processor is further configured to transmit a response message to the computing device indicating that the application identifier identifies an invalid sender application in response to determining that the application identifier associated with the sender application executing on the sender device is invalid.

21. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by a hardware processor, cause the processor to perform a method for providing access control for a computing device, the method comprising:

receiving a request to authenticate the computing device from a sender device, wherein the request includes an application identifier associated with an application executing on the sender device;

authenticating the computing device in response to receiving the request;

transmitting a session key to the sender device in response to determining that the computing device is valid;

determining whether the application executing on the sender device is valid based on the application identifier further received from the computing device; and

transmitting the session key to the computing device in response to determining that the sender application is valid to facilitate secure communication between the sender device and the computing device using the session key.

Assignments (1)
CHANGE OF NAME Recorded Dec 5, 2017
From: GOOGLE INC.
To: GOOGLE LLC
Reel/Frame 044695/0115 →
Continuity (4)
Continuation 15187064 · Jun 20, 2016
Continuation 14572282 · Dec 16, 2014
Provisional Application 61922389 · Dec 31, 2013
Related Publication 20170250985A1 · Aug 31, 2017