# US 9,438,603 B2 · Method for managing access right of terminal to resource by server in wireless communication system, and device for same > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,438,603 B2 - Document ID: US9438603B2 - Status: Granted - Kind: B2 - Application number: 14/420,847 - Filed: 2013-09-02 - Published: 2015-07-23 - Granted: 2016-09-06 - Earliest claimed: 2012-09-07 - Assignees: LG Electronics Inc. - Applicants: LG ELECTRONICs INC. - Inventors: Rama Gopala Nallapa Raju; Seungkyu Park; Seongyun Kim - Web page: https://patentgrep.com/patent/US9438603B2 ## CPC - H04L 63/101: {Access control lists [ACL]} - H04W 4/50: Service provisioning or reconfiguring - H04W 12/08: Access security - H04W 48/02: Access restriction performed under specific conditions - H04W 88/16: Gateway arrangements - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method for managing an access right of a terminal to a resource by a server according to one embodiment of the present invention is disclosed, and the method is performed by a gateway device and comprises the steps of: receiving a management command for adding, to a privilege management object (MO), or updating an access control list (ACL) to a resource(s) of a terminal or a terminal group for a secondary server having no access right to the resource(s) from a primary server; making a request for ACL(s) of the resource(s) to the terminal or each of terminals in the terminal group; receiving the ACL(s) of the resource(s) from the terminal or each of the terminals in the terminal group; determining on the basis of the received ACL(s) whether the primary server has permission to perform the management command; and if it is determined that the primary server has permission to perform the management command, adding, to the privilege MO, or updating the ACL of the resource(s), wherein the privilege MO is stored in the gateway device and can include information on an access right of a specific server to a resource of a specific terminal. ## Claims ### Claim 1 A method of managing an access right for a resource of a terminal of a server, which is performed by a gateway device, comprising: receiving a management command from a primary server to add or modify a privilege ACL (access control list), in a privilege MO (management object), for a target resource(s) for a secondary server, which has no access right for the target resource(s) of a terminal or a terminal group, wherein the privilege ACL indicates that the secondary server is allowed to have a privilege to access the target resource(s) for at least one of Get, Add, Delete and Replace commands; requesting ACL(s) for the target resource(s) to the terminal or each of terminals belonging to the terminal group; receiving the ACL(s) for the target resource(s) from the terminal or each of the terminals belonging to the terminal group; determining whether or not the primary server has a right to perform the management command based on the received ACL(s); and if it is determined that the primary server has the right to perform the management command, adding or modifying the privilege ACL for the target resource(s) in the privilege MO, wherein the privilege MO is stored in the gateway device and comprises information on an access right for a target resource of a specific terminal of a specific server. ### Claim 2 (depends on 1) The method of claim 1, wherein the privilege MO comprises a target identifier node indicating an identifier of a terminal or a terminal group corresponding to a target of a specific command, a target type node indicating whether or not the target identifier corresponds to an identifier of a single terminal or an identifier of a terminal group, an URI (uniform resource identifier) node indicating a specific target resource of the terminal or the terminal group to which the specific command is applied and a privilege ACL node indicating an access right for the specific target resource. ### Claim 3 (depends on 1) The method of claim 1, further comprising transmitting a result of processing the management command, which is used for adding or modifying a privilege ACL for a specific target resource of the terminal in the privilege MO, to the primary server. ### Claim 4 (depends on 1) The method of claim 1, wherein the determining whether or not the primary server has the right to perform the management command comprises determining whether or not the primary server has a right to modify the privilege ACL(s) for the target resource(s) received from the terminal or each of the terminals belonging to the terminal group. ### Claim 5 (depends on 4) The method of claim 4, wherein if the primary server does not have the right to modify the privilege ACL for at least one of the target resources received from each of the terminals belonging to the terminal group, it is determined that the primary server has no right to perform the management command. ### Claim 6 (depends on 5) The method of claim 5, further comprising: if it is determined that the primary server has no right to perform the management command, transmitting a result indicating that the management command has failed to the primary server. ### Claim 7 (depends on 6) The method of claim 6, further comprising transmitting an identifier (ID) of a terminal(s), which the primary server has no right to perform the management command, together with the result. ### Claim 8 (depends on 1) The method of claim 1, further comprising: if a management command for the target resource(s) of the terminal or the terminal group is received from the secondary server, authenticating a right of the secondary server based on a privilege ACL for the target resource(s) in the privilege MO. ### Claim 9 (depends on 8) The method of claim 8, wherein the authenticating comprises determining whether or not the secondary server has a right to perform the management command based on the privilege ACL for the target resource(s) in the privilege MO. ### Claim 10 A gateway device configured to manage an access right for a resource of a terminal of a server, comprising: an RF (radio frequency) unit; and a processor configured to control the RF unit, the processor configured to: receive a management command from a primary server to add or modify a privilege ACL (access control list), in a privilege MO (management object), for a target resource(s) for a secondary server, which has no access right for the target resource(s) of a terminal or a terminal group, wherein the privilege ACL indicates that the secondary server is allowed to have a privilege to access the target resource(s) for at least one of Get, Add, Delete and Replace commands, request ACL(s) for the target resource(s) to the terminal or each of terminals belonging to the terminal group, receive the ACL(s) for the target resource(s) from the terminal or each of the terminals belonging to the terminal group, determine whether or not the primary server has a right to perform the management command based on the received ACL(s), if it is determined that the primary server has the right to perform the management command, add or modify the privilege ACL for the target resource(s) in the privilege MO, wherein the privilege MO is stored in the gateway device and comprises information on an access right for a target resource of a specific terminal of a specific server.