Samsung Electronics Co., Ltd.

Sanjeev Verma

Paul N Fahn

Byung-Rae Lee

Alan Messer

Bo-Gyeong Kang

Mahfuzur Rahman

Moiz Sonasath

A system and method for secure access to IoT devices using a mobile device. The mobile device includes a memory configured to store a private value thereon. The mobile device also includes a processor. The processor is configured establish a secure connection with the between the mobile device and a trusted server using the private value, receive a token from the a third party server via the trusted server, transmit the token to a provisioning server via the trusted server, receive an Internet of Things (IoT) profile from the provisioning server via the trusted server, and configure an IOT gateway based on the IoT profile.

Method of providing secure access to hotel IoT services through mobile devices

A gateway device, system, and method are presented for securely obtaining health information from a personal medical device. The system installs a gateway application in a gateway device. The gateway application executes in a secure area of the gateway device. The system establishes first secure communications with the gateway application and receives aggregated personal medical device information from the gateway application. The gateway application establishes second secure communications with a personal medical device and receives information from the personal medical device via the second secure communications. The gateway application aggregates information from the personal medical device and send the aggregated information to the system via the first secure communications.

Secure pairing of eHealth devices and authentication of data using a gateway device having secured area

A Digital Rights Management (DRM) service system providing digital content to which DRM technology is applied, when one or more DRM content is provided to a client device, download information for a DRM module capable of installing a DRM agent corresponding to a DRM system applied to the DRM content is provided together, making it possible for the client device to download the DRM module based on the download information, install the DRM agent, and use the DRM content.

Method and apparatus for downloading DRM module

Methods and systems of rendering content on a device having a native digital rights management (DRM) system are described. A device, such as an end-user device capable of executing or playing content, acquires content in a common content format file having standardized locations for specific types of data. A generic digital rights token associated with the content is obtained by utilizing one of the standardized locations in the content format file, where the rights token contains information sufficient to allow retrieval of the rights associated with the content. Utilizing data in another of the standardized locations, it is then determined whether the device is registered in a domain. A license server directory may be accessed utilizing data in another of the standardized locations in the common content format file and a domain identifier, a device identifier, or both are transmitted to the license server directory. A native DRM system trigger is received and, upon activation of the trigger, a native DRM license is acquired, thereby enabling rendering of the content in the common content format file on the device.

Generic rights token and DRM-related service pointers in a common protected content file

A secure authentication channel (SAC) between two nodes in a communication network is created by the nodes themselves using mutual authentication. The network has two nodes, a coordinating entity, two PKI-based SACs, and one non-PKI SAC which is created by the two nodes and is for use by the nodes. The coordinating entity generates a master key which is transmitted to two nodes via a PKI-based SAC established between the coordinating entity and each of the two nodes. One node uses the master key to generate a first random number and the second node uses the key to generate a second random number. The second node also has an encrypted third random number. The network also has a third SAC, which is not solely based on PKI, between the first node and the second node and is created when the two nodes have authenticated each other. The mutual authentication process occurs without the intervention of the coordinating entity.

Lightweight secure authentication channel

In a first embodiment of the present invention, a method for registering a new device to a control point in a home network is provided, the method comprising: generating a first self-certified identification at the control point, the generation using a pseudo-random generated number and using an identification of the control point; and sending a secure message to the new device containing the first self-certified identification.

Generation of self-certified identity for efficient access control list management

A user playing a media file having ads on a playback device is able to automatically skip the ads during playback depending on the user's subscription level, as indicated in a user license or user account information. Whether an ad is automatically skipped may depend not only on the user license but also on attributes of the ad. An ad may have a skip-level which indicates the 'importance' of the ad. If the advertiser wants to ensure that the ad will be seen and not be automatically skipped by a media playback unit, it can pay a higher price for the ad and the ad will be assigned a higher skip-level value. On the user subscription side, a user who wants to avoid ads may pay a higher subscription fee and have a user license that determines, via an auto-skip level value ('user level'), how many ads the user can automatically skip during playback of the media file. With a higher the auto-skip level value, the user is able to automatically skip more ads on the playback device.

Rights-based advertisement management in protected media

In a first embodiment of the present invention, a method of establishing end-to-end Quality of Service (QoS) is provided, the method comprising: receiving minimum QoS requirements for a connection between a local device in a local network and a remote device in a remote network; requesting that a QoS connection between the local device and a local gateway in the local network be established; computing remaining QoS requirements by deducting achieved QoS between the local device and the local gateway from the minimum QoS requirements; requesting that a QoS connection between the remote device and a remote gateway in the remote network be established, using the remaining QoS requirements; and requesting to configure a QoS connection between a local gateway and a remote gateway.

Quality of service management for home-to-home connections

In one embodiment, a method for establishing Quality of Service (QoS) in a home network is provided. The method comprises: receiving a request for bandwidth in a virtual private network (VPN); receiving a traffic specification of an application on a control point retrieving a traffic policy; retrieving path characteristics of the VPN; and reserving resources in the VPN based on the path characteristics, the traffic policy, and the traffic specification.

Growing community of inventors

San Jose, CA, United States of America

Sanjeev Verma