# US 2019/0356485 A1 · Secure methods and systems for identifying bluetooth connected devices with installed application > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0356485 A1 - Document ID: US20190356485A1 - Status: Published application - Kind: A1 - Application number: 15/982,723 - Filed: 2018-05-17 - Published: 2019-11-21 - Earliest claimed: 2018-05-17 - Assignees: Bose Corporation - Applicants: Bose Corporation - Inventors: Douglas Warren Young; Prasanna Rao; Jim Lambert; Niall Tone Kavanagh; Matthew Jannace - Web page: https://patentgrep.com/patent/US20190356485A1 ## CPC - H04L 9/0869: {involving random numbers or seeds} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0838: {Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061)} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key} - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - H04R 1/1041: {Mechanical or electronic switches, or control elements (switches in general H01H)} - H04W 12/069: using certificates or pre-shared keys - H04W 12/69: Identity-dependent - H04L 2209/42: Anonymization, e.g. involving pseudonyms - H04L 2209/805: Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor - H04R 2420/07: Applications of wireless loudspeakers or wireless microphones - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 84/18: Self-organising networks, e.g. ad-hoc networks or sensor networks - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04R: LOUDSPEAKERS, MICROPHONES, GRAMOPHONE PICK-UPS OR LIKE ACOUSTIC ELECTROMECHANICAL TRANSDUCERS; ELECTRIC HEARING AIDS; PUBLIC ADDRESS SYSTEMS (producing sounds with frequency not determined by supply frequency G10K) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system and method for securely verifying a connection between a remote device and an audio device. The method includes establishing a wireless connection between the remote device and the audio device. The remote device has an application configured to control operation of the audio device. An identity resolving key (IRK) for the application is obtained with the remote device. The IRK is transmitted to the audio device via the wireless connection. An instruction to is transmitted the audio device to generate a random resolvable address for the application using the IRK and to broadcast data containing the random resolvable address. The data containing the random resolvable address is received by the application of the remote device. An active audio connection between the remote device and the audio device is identified if the random resolvable address is able to be resolved by the application using the IRK. ## Claims ### Claim 1 A method for securely verifying a connection between a remote device and an audio device, comprising: establishing a wireless connection between the remote device and the audio device, the remote device having an application configured to control operation of the audio device; obtaining an identity resolving key (IRK) for the application; transmitting the IRK to the audio device from the application; transmitting an instruction to the audio device from the application to generate a random resolvable address for the application using the IRK and to broadcast data containing the random resolvable address; receiving the data containing the random resolvable address by the application of the remote device; and identifying whether an active audio connection exists between the remote device and the audio device if the random resolvable address is able to be resolved by the application using the IRK. ### Claim 2 (depends on 1) The method of claim 1, wherein the obtaining comprises generating the IRK with the application or receiving the IRK from an authentication server. ### Claim 3 (depends on 1) The method of claim 1, further comprising establishing an application layer wireless connection between the application and the audio device, wherein transmitting the IRK, transmitting the instruction, and receiving the data are performed with respect to the application layer wireless connection. ### Claim 4 (depends on 3) The method of claim 3, wherein the wireless connection comprises a classic Bluetooth connection and the application layer wireless connection comprises a Bluetooth Low Energy connection. ### Claim 5 (depends on 1) The method of claim 1, further comprising establishing a data connection between the remote device and an authentication server, transmitting the IRK to the authentication server via the data connection, encrypting the IRK with the authentication server, and transmitting the IRK in an encrypted state to the application via the data connection, and wherein transmitting the IRK to the audio device comprises transmitting the IRK in the encrypted state. ### Claim 6 (depends on 5) The method of claim 5, further comprising completing an end-to-end authentication process between the audio device and the authentication server, and wherein the encrypting comprises encrypting the IRK using a shared secret from the end-to-end authentication process. ### Claim 7 (depends on 6) The method of claim 6, further comprising providing authentication credentials to the authentication server via the data connection, and wherein completing the end-to-end authentication process comprises using the remote device as a relay between the audio device and the authentication server only upon acceptance by the authentication server of the authentication credentials. ### Claim 8 (depends on 1) The method of claim 1, further comprising, after the verifying, automatically transmitting audio data and an instruction to process the audio data to the audio device from the remote device, updating a user interface of the application to indicate the wireless connection, or a combination including at least one of the foregoing. ### Claim 9 (depends on 1) The method of claim 1, wherein the instruction is configured to instruct the audio device to insert the random resolvable address in a Bluetooth Low Energy (BLE) advertising packet and the data includes the BLE advertising packet. ### Claim 10 (depends on 9) The method of claim 9, wherein the random resolvable address is received by the application as a first random resolvable address and the BLE advertising packet includes a random number that is refreshed periodically that is received by the application while receiving the data, and wherein the verifying includes generating a second random resolvable address with the application using the random number and the IRK and determining whether the second random resolvable address matches the first random resolvable address. ### Claim 11 (depends on 10) The method of claim 10, wherein the random number, the random resolvable address, or both, are stored in a manufacturer specific data field of the BLE advertising packet. ### Claim 12 A method for securely verifying a connection between a remote device and an audio device, comprising: establishing a wireless connection between the remote device and the audio device, the remote device having an application configured to control operation of the audio device; obtaining an identity resolving key (IRK) for the application with the remote device; transmitting the IRK to the audio device via the wireless connection; generating, by the audio device, a random resolvable address for the application using the IRK; broadcasting data containing the random resolvable address with the audio device; receiving the data with the application of the remote device; and identifying whether an active audio connection exists between the remote device and the audio device if the random resolvable address is able to be resolved by the application using the IRK. ### Claim 13 An audio system comprising: a remote device having a wireless transceiver configured to establish a wireless connection with an audio device, a memory module, and an application, configured to control operation of the audio device, installed in the memory module, the remote device configured to obtain an identity resolving key (IRK) for the application and to transmit the IRK to the audio device; wherein the application is configured to instruct the audio device to (i) generate a random resolvable address for the application using the IRK and (ii) broadcast data that includes the random resolvable address, to receive the data, and to identify whether an active audio connection exists between the remote device and the audio device if the random resolvable address is able to be resolved by application using the IRK. ### Claim 14 (depends on 13) The audio system of claim 13, wherein the application is configured to communicate with the audio device via a Bluetooth Low Energy (BLE) connection, and the connection between the remote device and the audio device verified by the application comprises a classic Bluetooth connection. ### Claim 15 (depends on 13) The audio system of claim 13, wherein the application is configured to automatically, after verifying the connection, transmit audio data and an instruction to process the audio data to the audio device, update a user interface of the application to indicate the connection, or a combination including at least one of the foregoing. ### Claim 16 (depends on 13) The audio system of claim 13, wherein the application is configured to receive the random resolvable address as a first random resolvable address, to generate a second random resolvable address using the IRK and a random number contained in the broadcast data, and wherein the application is configured to verify the connection by determining whether the second random resolvable address matches the first random resolvable address. ### Claim 17 An audio system comprising: an audio device having a first wireless transceiver; and a remote device having a second wireless transceiver configured to establish a wireless connection with the audio device, a memory, and an application configured to control operation of the audio device installed in the memory, the remote device configured to generate an identity resolving key (IRK) for the application and to transmit the IRK to the audio device; wherein the audio device is configured to generate a random resolvable address for the application using the IRK and to broadcast data that includes the random resolvable address; and wherein the application is configured to receive the data and identify whether an active audio connection exists between the remote device and the audio device if the random resolvable address is able to be resolved by application using the IRK. ### Claim 18 (depends on 17) The audio system of claim 17, wherein the audio device is configured to insert the random resolvable address into a Bluetooth Low Energy (BLE) advertising packet and the data includes the BLE advertising packet. ### Claim 19 (depends on 17) The audio system of claim 17, further comprising an authentication server, wherein the application is configured to request the IRK from the authentication server and the authentication server is configured to generate the IRK. ### Claim 20 (depends on 19) The audio system of claim 19, wherein the authentication server is configured transmit the IRK to the application only after completion of an end-to-end authentication process with the audio device using the remote device as a relay.