US 12,273,456 B2
Two-way authentication for voice-activated devices
Rohit Pradeep Shetty, Bengaluru (IN)
Assigned to Omnissa, LLC, Mountain View, CA (US)
Filed by Omnissa, LLC, Mountain View, CA (US)
Filed on Oct. 21, 2019, as Appl. No. 16/659,016.
Prior Publication US 2021/0119802 A1, Apr. 22, 2021
Int. Cl. H04L 9/32 (2006.01)
CPC H04L 9/3231 (2013.01) [H04L 9/3228 (2013.01); H04L 9/3242 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method for authenticating a voice-activated device using an application server that supports an application on a user device, comprising:
receiving, at the application server, a request from the user device to authenticate the voice-activated device, wherein the voice-activated device is not authenticated at the time of the request;
in response to the request from the user device, providing a first temporary key and a session ID from the application server to the user device without communication via the voice-activated device and causing the user device to provide the first temporary key to the voice-activated device, wherein providing the first temporary key to the user device comprises providing a pre-shared key to the user device, the user device generating the first temporary key by hashing the pre-shared key with a hash function based on a timestamp;
receiving, at the application server from the voice-activated device, the first temporary key that has been provided from the application server to the user device, and then from the user device to the voice-activated device;
in response to receiving, at the application server from the voice-activated device, the first temporary key provided to the user device, providing a second temporary key from the application server to the voice-activated device without communication via the user device and causing the voice-activated device to provide the second temporary key to the user device;
receiving, at the application server from the user device, the second temporary key that has been provided from application server to the voice-activated device, and then from the voice-activated device to the user device and the session ID; and
at the application server, determining that the first and second temporary keys are each valid and that the session ID that the application server provided with the first temporary key to the user device is the same session ID that the application server received with the second temporary key from the user device, and
in response to said determining, authenticating the voice-activated device.