# US 10,320,786 B2 · Electronic apparatus and method for controlling the same > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,320,786 B2 - Document ID: US10320786B2 - Status: Granted - Kind: B2 - Application number: 15/257,000 - Filed: 2016-09-06 - Published: 2017-03-16 - Granted: 2019-06-11 - Earliest claimed: 2015-09-14 - Assignees: Samsung Electronics Co., Ltd. - Applicants: Samsung Electronics Co., Ltd. - Inventors: Jung-kyuen Lee; In-ho Kim; In-hwan We; Jong-tak Lee - Web page: https://patentgrep.com/patent/US10320786B2 ## CPC - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - G06F 21/74: operating in dual or compartmented mode, i.e. at least one secure mode - H04W 12/041: Key generation or derivation - H04W 12/0433: Key management protocols - H04W 12/06: Authentication - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 67/025: for remote control or remote monitoring of applications - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Provided are an electronic apparatus in which a normal operating system (OS) and a secure OS are installed and a method for controlling the electronic apparatus. The method for controlling the electronic apparatus includes searching for at least one external terminal in which a secure OS is installed, selecting a first terminal from among the at least one external terminal in which a secure OS is installed, in response to a first terminal being selected from the retrieved at least one external terminal, performing communication connection with the first terminal, searching for at least one terminal in which only a normal OS is installed, from among at least one external terminal that is capable of being communication-connected to the first terminal, and performing communication with a second terminal of the at least one terminal in which only the normal OS is installed, through the first terminal. ## Claims ### Claim 1 A method for controlling an electronic apparatus in which a normal operating system (OS) and a secure OS are installed, the method comprising: searching, by the electronic apparatus in which the normal OS and the secure OS are installed, for at least one external terminal in which a secure OS is installed; selecting, by the electronic apparatus in which the normal OS and the secure OS are installed, a first terminal from among the searched at least one external terminal in which a secure OS is installed; performing communication between the electronic apparatus, in which the normal OS and the secure OS are installed, and the first terminal in which the normal OS and the secure OS are installed in response to the first terminal being selected; searching, by the electronic apparatus in which the normal OS and the secure OS are installed, for at least one external terminal in which a normal OS is installed, from among at least one external terminal that is capable of being connected to the first terminal; selecting, by the electronic apparatus in which the normal OS and the secure OS are installed, a second terminal, from among the searched at least one external terminal, in which the normal OS is installed and the secure OS is not installed, wherein the second terminal is capable of being connected to the first terminal; and performing communication between the electronic apparatus and the second terminal in which the normal OS is installed and the secure OS is not installed, through the first terminal in which the normal OS and the secure OS are installed. ### Claim 2 (depends on 1) The method as claimed in claim 1, further comprising grouping the at least one terminal in which the normal OS is installed, based on user selection. ### Claim 3 (depends on 1) The method as claimed in claim 1, wherein: the searching for the at least one terminal in which the normal OS is installed comprises: receiving information about at least one terminal in which the secure OS is not installed, from the first terminal; displaying a UI based on information about the at least one terminal in which the normal OS is installed; and wherein the performing communication between the electronic apparatus and the second terminal comprises performing communication with the second terminal selected by a user among electronic apparatuses included in the UI. ### Claim 4 (depends on 1) The method as claimed in claim 1, further comprising: after communication between the electronic apparatus and the first terminal is performed, generating a first key value in the secure OS, transmitting the first key value to the first terminal, and receiving a second key value from the first terminal; and maintaining communication with the first terminal using the first key value and the second key value. ### Claim 5 (depends on 4) The method as claimed in claim 4, further comprising: blocking communication between the electronic apparatus and the first terminal when at least one of the first key value and the second key value is not present. ### Claim 6 (depends on 4) The method as claimed in claim 4, wherein the first key value and the second key value are updated at a preset period. ### Claim 7 (depends on 4) The method as claimed in claim 4, further comprising: generating a control command using the second key value in the secure OS in response to a user command for performing an Internet of things (IoT) service being input, and transmitting the control command generated based on the second key value to the first terminal, wherein the first terminal decodes the generated control command based on the second key value in the secure OS and performs the IoT service. ### Claim 8 (depends on 1) The method as claimed in claim 1, further comprising, after communication connection between the electronic apparatus and the second terminal is performed, generating a third key value in the secure OS and transmitting the third key value to the second terminal, wherein, in response to a control command being received from the electronic apparatus to perform an IoT service, the second terminal authenticates the electronic apparatus using the third key value. ### Claim 9 (depends on 3) The method as claimed in claim 3, further comprising, in response to a third terminal being selected from the at least one terminal in which the normal OS included in the UI is installed, displaying a control menu for controlling the third terminal. ### Claim 10 An electronic apparatus comprising: communication circuitry configured to communicate with an external terminal; and a processor configured to drive one of a normal operating system (OS) and a secure OS to perform an operation of the electronic apparatus, the electronic apparatus including both the normal OS and the secure OS; wherein the processor of the electronic apparatus is configured to: search for at least one external terminal in which a secure OS is installed; select a first terminal, from among the searched at least one external terminal, in which the secure OS and the normal OS are installed; control the communication circuitry to perform communication between the electronic apparatus and the first terminal; search for at least one terminal in which the normal OS is installed, from among at least one external terminal that is capable of being connected to the first terminal; select a second terminal, from the searched at least one terminal, in which the normal OS is installed but the secure OS is not installed, wherein the second terminal is capable of being connected to the first terminal; and control the communication circuitry to perform communication between the electronic apparatus and the selected second terminal in which the normal OS is installed and the secure OS is not installed, through the first terminal in which both the normal OS and the secure OS are installed. ### Claim 11 (depends on 10) The electronic apparatus as claimed in claim 10, wherein the processor is configured to group the at least one terminal in which the normal OS is installed, based on a user selection. ### Claim 12 (depends on 10) The electronic apparatus as claimed in claim 10, further comprising a display, wherein the processor is configured to control the communication circuitry to receive information about at least one terminal in which the secure OS is not installed, from the first terminal, to control the display to display a UI based on information about the at least one terminal in which the normal OS is installed, and to control the communication circuitry to perform communication with the second terminal selected by a user among electronic apparatuses included in the UI. ### Claim 13 (depends on 10) The electronic apparatus as claimed in claim 10, wherein the processor is configured to generate a first key value in the secure OS and to control the communication circuitry to transmit the first key value to the first terminal, and to receive a second key value from the first terminal, after communication with the first terminal is performed, and said processor is configured to control the communication circuitry to maintain communication with the first terminal using the first key value and the second key value. ### Claim 14 (depends on 13) The electronic apparatus as claimed in claim 13, wherein, when at least one of the first key value and the second key value is not present, the processor is configured to control the communication circuitry to block communication with the first terminal. ### Claim 15 (depends on 13) The electronic apparatus as claimed in claim 13, wherein the first key value and the second key value are updated at a preset period. ### Claim 16 (depends on 13) The electronic apparatus as claimed in claim 13, wherein: in response to a user command for performing an Internet of things (IoT) service being input, the processor is configured to generate a control command using the second key value in the secure OS and to control the communication circuitry to transmit the control command generated based on the second key value to the first terminal; and the first terminal is configured to decode the generated control command based on the second key value in the secure OS and to perform the IoT service. ### Claim 17 (depends on 10) The electronic apparatus as claimed in claim 10, wherein: after communication connection with the second terminal is performed, the processor is configured to generate a third key value in the secure OS, and to control the communication circuitry to transmit the third key value to the second terminal; and in response to a control command being received from the electronic apparatus to perform the IoT service, the second terminal is configured to authenticate the electronic apparatus using the third key value. ### Claim 18 (depends on 12) The electronic apparatus as claimed in claim 12, wherein, in response to a third terminal being selected from the at least one terminal in which the normal OS included in the UI, the processor is configured to control the display to display a control menu for controlling the third terminal. ### Claim 19 A computer readable non-transitory recording medium having recorded thereon a program for executing a method for controlling an electronic apparatus in which a normal operating system (OS) and a different secure OS are installed, the method comprising: searching, by the electronic apparatus which includes the normal OS and the secure OS, for at least one external terminal in which a secure OS is installed; selecting, by the electronic apparatus which includes the normal OS and the secure OS, a first terminal, from among the searched at least one external terminal, in which the secure OS and the normal OS are installed; performing communication between the electronic apparatus and the first terminal in response to a first terminal being selected from the retrieved at least one external terminal; searching, by the electronic apparatus which includes the normal OS and the secure OS, for at least one terminal in which a normal OS is installed, from among at least one external terminal that is capable of being connected to the first terminal; selecting, by the electronic apparatus which includes the normal OS and the secure OS, a second terminal, from the searched at least one terminal, in which the normal OS is installed but the secure OS is not installed, wherein the second terminal is capable of being connected to the first terminal; and performing communication between the electronic apparatus and the selected second terminal in which the normal OS is installed and the secure OS is not installed, through the first terminal in which both the normal OS and the secure OS are installed.