Device authentication using list of known good devices

A computer-readable storage medium having stored thereon program instructions that, when executed by a processor of a first electronic device, cause the processor to execute a method comprising:

• establishing a connection to a second electronic device via a communication channel, wherein establishing the connection includes receiving a device identifier from the second electronic device;
• determining whether the device identifier is included in a list of known-good device identifiers maintained by the first electronic device;
• in the event that the device identifier is not included in the list of known-good device identifiers:
• performing an authentication operation with the second electronic device via the communication channel, wherein the second electronic device is allowed to interoperate with the first electronic device if the authentication operation completes successfully;
• and
• adding the device identifier to the list of known-good device identifiers in the event that the authentication operation completes successfully;
• and
• in the event that the device identifier is included in the list of known-good device identifiers, allowing the second electronic device to interoperate with the first electronic device without performing the authentication operation.

An electronic device comprising:

• a communication interface configured to connect to and communicate with a connected electronic device;
• a connection manager coupled to the communication interface;
• authentication logic coupled to the connection manager;
• and
• a memory coupled to the connection manager and configured to store a list of known-good device identifiers,
• the connection manager being configured to:
• receive, via the communication interface, a device identifier for a connected device;
• determine whether the received device identifier is included in the list of known-good device identifiers;
• allow the connected device to interoperate with the electronic device via the communication interface without authentication in the event that the received device identifier is included in the list of known-good device identifiers;
• use the authentication logic to perform an authentication operation with the connected device in the event that the received device identifier is included in the list of known-good device identifiers;
• add the received device identifier to the list of known-good device identifiers in the event that the authentication operation completes successfully;
• and
• allow the connected device to interoperate with the electronic device via the communication interface in the event that the authentication operation completes successfully.

A method for communicating between a host device and one or more accessories, the method comprising, by the host device:

• receiving an identifier of an accessory on a communication port;
• preventing the accessory from interoperating with the host device in the event that the received identifier of the accessory is on a list of known-bad accessory identifiers;
• allowing the accessory to interoperate with the host device in the event that the received identifier of the accessory is on a list of known-good accessory identifiers;
• and
• in the event that the received identifier of the accessory is on neither the list of known-bad accessory identifiers nor the list of known-good accessory identifiers:
• performing an authentication operation with the accessory via the communication port;
• in the event that the authentication operation completes successfully, adding the received identifier of the accessory to the list of known-good accessory identifiers and allowing the accessory to interoperate with the host device;
• and
• in the event that the authentication operation does not complete successfully, preventing the accessory from interoperating with the host device.

An electronic device comprising:

• a communication interface including a port configured to connect to and communicate with another electronic device;
• a connection manager coupled to the communication interface;
• authentication logic coupled to the connection manager;
• and
• a memory coupled to the connection manager and configured to store a list of known-good device identifiers and a list of known-bad device identifiers,
• the connection manager being configured to:
• receive a device identifier of a connected device via the communication port;
• prevent the connected device from interoperating with the host device in the event that the received device identifier is on a list of known-bad device identifiers;
• allow the connected device to interoperate with the electronic device via the communication port in the event that the received device identifier is on a list of known-good device identifiers;
• and
• in the event that the received device identifier is on neither the list of known-bad accessories nor the list of known-good accessory identifiers:
• perform an authentication operation with the connected device via the communication port;
• in the event that the authentication operation completes successfully, add the received device identifier to the list of known-good device identifiers and allow the accessory to interoperate with the electronic device;
• and
• in the event that the authentication operation does not complete successfully, prevent the connected device from interoperating with the electronic device.