# US 12,003,965 B2 · Electronic device for providing IOT device control service, and control method therefor

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,003,965 B2
- Document ID: US12003965B2
- Status: Granted
- Kind: B2
- Application number: 17/271,453
- Filed: 2019-09-06
- Published: 2021-10-21
- Granted: 2024-06-04
- Earliest claimed: 2018-09-13
- Assignees: Samsung Electronics Co., Ltd.
- Applicants: Samsung Electronics Co., Ltd.
- Inventors: Taesoo Jun; Saerome Kim; Jihoon Jung
- Web page: https://patentgrep.com/patent/US12003965B2

## CPC

- H04L 63/108: {when the policy decisions are valid for a limited amount of time}
- H04W 12/08: Access security
- H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play
- H04L 41/0886: {Fully automatic configuration}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 67/125: involving control of end-device applications over a network
- H04W 12/06: Authentication
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

An electronic device according to various embodiments of the present invention comprises a communication module, a processor, and a memory which stores a control list for a plurality of devices controllable through a communication network and which is operably connected to the processor, wherein the memory that are configured, when executed, to cause the processor to perform authentication for a first terminal in response to a control authority configuration request for controlling at least one device of the plurality of devices in a first terminal, transmit authentication information about the first terminal to the at least one device of the plurality of devices included in the control list, and configure a control right of the first terminal for the at least one device. In addition, embodiments other than the various embodiments of the present invention are possible.

## Claims

### Claim 1

An electronic device comprising:
communication circuitry;
a processor; and
a memory operatively connected with the processor and storing a control list of a plurality of devices controllable through a communication network,
wherein the memory stores an open connectivity foundation (OCF) standards-based application programming interface (API) and instructions that are configured, when executed, to cause the processor to:
receive, through a multiple ownership transfer (MOT) agent operating on the OCF standards-based API, a control authority setting request from a first terminal for controlling at least one of the plurality of devices;
perform authentication with respect to the first terminal in response to the control authority setting request;
transmit credential information for the first terminal to the at least one of the plurality of devices included in the control list;
transmit a first shared key for authentication of the first terminal to the at least one of the plurality of devices;
set a control authority of the first terminal for the at least one of the plurality of devices;
in response to determining that there is no need to control the at least one of the plurality of devices, discard the credential information of the first terminal by using the MOT agent operating on the OCF standards-based API; and
notify the at least one of the plurality of devices that the credential information of the first terminal is discarded,
wherein the control list comprises item-specific device identification information, device type information, control authority setting information, and security level information of the plurality of devices, and
wherein the credential information comprises identification information of the first terminal, a list of device over which the first terminal is to share a control authority, the first shared key, and an authentication certificate.

### Claim 2 (depends on 1)

The electronic device of claim 1, wherein the instructions are configured to cause the processor to:
set at least one of the plurality of devices included in the control list to a control authority sharing possible state.

### Claim 3 (depends on 2)

The electronic device of claim 2, wherein the instructions are configured to cause the processor to:
transmit invitation information comprising at least one of the control list or the first shared key to the first terminal, by using the communication circuitry; and
receive the credential information generated based on the invitation information from the first terminal, by using the communication circuitry.

### Claim 4 (depends on 1)

The electronic device of claim 1, wherein the instructions are configured to cause the processor to perform authentication with respect to the first terminal by using an out-of-band scheme.

### Claim 5

A method for providing a device control service by an electronic device that manages a control list for a plurality of devices controllable through a communication network, the method comprising:
receiving, through a multiple ownership transfer (MOT) agent operating on an open connectivity foundation (OCF) standards-based application programming interface (API), a control authority setting request from a first terminal for controlling at least one of the plurality of devices;
performing authentication with respect to the first terminal in response to the control authority setting request;
transmitting credential information for the first terminal to the at least one of the plurality of devices included in the control list;
transmitting a first shared key for authentication of the first terminal to the at least one of the plurality of devices;
setting a control authority of the first terminal for the at least one of the plurality of devices;
in response to determining that there is no need to control the at least one of the plurality of devices, discarding the credential information of the first terminal by using MOT agent operating on the OCF standards-based API; and
notifying the at least one of the plurality of devices that the credential information of the first terminal is discarded,
wherein the control list comprises item-specific device identification information, device type information, control authority setting information, and security level information of the plurality of devices, and
wherein the credential information comprises identification information of the first terminal, a list of devices over which the first terminal is to share a control authority, the first shared key, and an authenticate certificate.

### Claim 6 (depends on 5)

The method of claim 5, further comprising:
setting at least one of the plurality of devices to a control authority sharing possible state.

### Claim 7 (depends on 6)

The method of claim 6, wherein the performing of authentication with respect to the first terminal comprises:
transmitting invitation information comprising at least one of the control list or the first shared key to the first terminal; and
receiving the credential information generated based on the invitation information from the first terminal.