IP Library Granted Patent US 11,924,639
Granted Patent B2
US 11,924,639 · App. 16/004,798 · Granted Mar 5, 2024

Revoking credentials after service access

Inventors: Michael Peter Montemurro (Toronto, CA); Stephen McCann (Southampton, GB); James Randolph Winter Lepp (Ottawa, CA)
Assignee: Malikie Innovations Limited
H04W12/08H04L63/10H04W4/40H04W4/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,924,639
App. No.
16/004,798
Granted
Mar 5, 2024
Kind
B2
Abstract

In some examples, an electronic device receives configuration information relating to network connectivity with a network of a vehicle, the configuration information including a credential. The electronic device establishes, using the configuration information, a connection with the network of the vehicle to access a service, and revokes the credential in response to a termination of the access of the service.

Claims (56)

1. A method comprising:

scanning, by an electronic device associated with a user renting a vehicle, a specified code displayed by a display device of the vehicle, wherein the specified code includes bootstrapping information with a time expiry set to an end of a rental period for the vehicle;

using, by the electronic device, the bootstrapping information to establish a connection with a configurator device;

receiving, by the electronic device from the configurator device, configuration information relating to network connectivity with a network of the vehicle, the configuration information including a credential;

establishing, by the electronic device using the configuration information, a connection with the network of the vehicle to access a service; and

revoking the credential in response to a termination of the access of the service, wherein the revoking of the credential comprises:

receiving, by the electronic device, revocation information from the configurator device, the revocation information for revoking the credential, and

in response to the revocation information, deleting the credential or marking the credential as invalid.

2. The method of claim 1 , wherein the configuration information comprises Device Provisioning Protocol (DPP) information.

3. The method of claim 2 , wherein the configuration information is included in a DPP Connector.

4. The method of claim 1 , wherein the connection established by the electronic device with the configurator device is a secure connection, and wherein the configuration information relating to network connectivity is received over the secure connection with the configurator device.

5. The method of claim 4 , wherein the configurator device comprises a Device Provisioning Protocol (DPP) Configurator.

6. The method of claim 4 , wherein the configurator device is part of the vehicle.

7. The method of claim 1 , wherein the revocation information is received from the configurator device in the vehicle.

8. The method of claim 1 , wherein the configuration information comprises service information relating to the service accessible by the electronic device.

9. The method of claim 8 , further comprising:

using, by the electronic device, the service information to access an application of the vehicle, the application providing the service.

10. The method of claim 8 , further comprising revoking the service information in response to the termination of the access of the service.

11. The method of claim 1 , further comprising:

in response to the revoking of the credential:

querying, by the electronic device, a server system to determine a cause of the revoking of the credential, and

determining, by the electronic device based on a response to the querying, whether the revoking of the credential is in response to the vehicle being stolen.

12. The method of claim 1 , wherein the specified code further includes a token that uniquely identifies a rental agreement governing the renting of the vehicle.

13. An electronic device associated with a user renting a vehicle, the electronic device comprising:

a communication interface;

a camera; and

at least one processor coupled to the communication interface and the camera, the at least one processor being configured to:

receive, from the camera, a specified code displayed by a display device of the vehicle and scanned by the camera, wherein the specified code includes bootstrapping information with a time expiry set to an end of a rental period for the vehicle;

use the bootstrapping information to establish a connection with a configurator device;

receive configuration information relating to network connectivity with a network of the vehicle, the configuration information including a credential;

establish, using the configuration information, a connection with the network of the vehicle to access a service; and

revoke the credential in response to a termination of the access of the service, based on user activation of a control item in a user interface indicating the termination of the access of the service, wherein the at least one processor is configured to revoke the credential by:

receiving revocation information from the configurator device, the revocation information for revoking the credential, and

in response to the revocation information, deleting the credential or marking the credential as invalid.

14. The electronic device of claim 13 , wherein the at least one processor is configured to:

obtain a new credential in response to the vehicle crossing a border between different geographic regions.

15. The electronic device of claim 13 , wherein the configuration information comprises service information relating to the service accessible by the electronic device, and the at least one processor is configured to:

use the service information to access an application of the vehicle, the application providing the service.

16. The electronic device of claim 13 , wherein the at least one processor is configured to:

in response to the revoking of the credential:

query a server system to determine a cause of the revoking of the credential, and

determine, based on a response to the querying, whether the revoking of the credential is in response to the vehicle being stolen.

17. The electronic device of claim 13 , wherein the specified code further includes a token that uniquely identifies a rental agreement governing the renting of the vehicle.

18. A non-transitory machine-readable storage medium comprising instructions that upon execution cause an electronic device associated with a user renting a vehicle to:

receive a specified code displayed by a display device of the vehicle and scanned by a camera of the electronic device, wherein the specified code includes bootstrapping information with a time expiry set to an end of a rental period for the vehicle;

use the bootstrapping information to establish a connection with a configurator device;

receive, from the configurator device, configuration information relating to network connectivity with a network of the vehicle, the configuration information including a credential;

establish, using the configuration information, a connection with the network of the vehicle to access a service; and

revoke the credential in response to a termination of the access of the service, wherein the revoking of the credential comprises:

receiving revocation information from the configurator device, the revocation information for revoking the credential, and

in response to the revocation information, deleting the credential or marking the credential as invalid.

19. The non-transitory machine-readable storage medium of claim 18 , wherein the configuration information comprises Device Provisioning Protocol (DPP) information.

20. The non-transitory machine-readable storage medium of claim 19 , wherein the configuration information is included in a DPP Connector.

21. The non-transitory machine-readable storage medium of claim 18 , wherein the configurator device comprises a Device Provisioning Protocol (DPP) Configurator.

22. The non-transitory machine-readable storage medium of claim 18 , wherein the configurator device is part of the vehicle.

23. The non-transitory machine-readable storage medium of claim 18 , wherein the specified code further includes a token that uniquely identifies a renting agreement governing the rental of the vehicle.

Assignments (6)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2023
From: BLACKBERRY LIMITED
To: OT PATENT ESCROW, LLC
Reel/Frame 064007/0061 →
NUNC PRO TUNC ASSIGNMENT Recorded Jun 16, 2023
From: OT PATENT ESCROW, LLC
To: MALIKIE INNOVATIONS LIMITED
Reel/Frame 064015/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 7, 2023
From: BLACKBERRY LIMITED
To: OT PATENT ESCROW, LLC
Reel/Frame 063269/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 21, 2018
From: BLACKBERRY UK LIMITED
To: BLACKBERRY LIMITED
Reel/Frame 046163/0024 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 18, 2018
From: MCCANN, STEPHEN
To: BLACKBERRY UK LIMITED
Reel/Frame 046119/0906 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 18, 2018
From: MONTEMURRO, MICHAEL PETER; LEPP, JAMES RANDOLPH WINTER
To: BLACKBERRY LIMITED
Reel/Frame 046119/0980 →
Continuity (1)
Related Publication 20190380034A1 · Dec 12, 2019