Patent ID: 9648017
Date: 2017-05-09
CPC Classifications: G07C,H04L

Claim:
1. A method for controlling a device requiring user-related permissions via a mobile terminal, said method utilizing a local data connection between a mobile terminal and a device to be controlled, wherein the control commands requiring user-related permissions for the device to be controlled are generated by means of an interaction via a connection between the mobile terminal and least one of (1) an authentication server and (2) device management server and are transferred to the device to be controlled from said at least one authentication server and device management server via the mobile terminal, said method comprising the steps of: (a) receiving said control commands requiring user-related permissions for the device to be controlled at the mobile terminal, and (b) thereafter transferring said control commands the device to be controlled, for the purpose of controlling the same, without storing said control commands in the mobile terminal, wherein said control commands received by the device to be controlled are not verified as to the permission by the user to execute said control commands; wherein the local data connection between the mobile terminal and the device to be controlled is established via a Bluetooth low energy (“BLE”) standard; and wherein said method further comprises the following steps: opening a software app by the user on the mobile terminal; carrying out a registration or login of the user using a connection between the mobile terminal and the authentication server wherein, after carrying out the login or registration, a user session ID is transmitted from the authentication server to the mobile terminal; selecting the device to be controlled by the user via the mobile terminal, wherein in the course of a BLE interaction between the mobile terminal and a BLE module of the device to be controlled, a signal containing the hardware ID of the device to be controlled is transmitted from the BLE module to the mobile terminal; establishing a connection between the mobile terminal and the device management server, wherein the status of the device to be controlled, which is identified by means of a hardware ID, is requested, and transmitting a signal that indicates the controllability of the device to be controlled via the mobile device, from the device management server to the mobile terminal; establishing a BLE data connection between the mobile terminal and the device to be controlled via the BLE module and a micro-controller of the device to be controlled, wherein, in a subsequent step, the micro-controller signs a data string with a public key of the device management server and transmits the signed data string to the mobile terminal; transmitting the signed data string together with the user session ID and the hardware ID of the device to be controlled to the device management serve server, wherein the control command is requested; verifying the user session ID of the device management server by means of an interaction with the authentication server and, if the user session ID is valid, requesting a data string response from an encryption module; verifying, by the encryption module, the data string signed by the micro-controller by means of a private key of the device management server and generating a data string response containing the control command, which together with the received data string is signed by the encryption module using a public key of the micro-controller; transferring the signed data string response together with the signed contained data string to the device management server, wherein thereafter the signed data string response together with the signed contained data string is routed via a connection between the mobile terminal and the device management server, the mobile terminal and the BLE data connection between the mobile terminal and the micro-controller without storage in the mobile terminal to the micro-controller; verifying the received signed data string response and the returned data string from the micro-controller by means of a private key and, after the verification has been carried out, transmitting the control command for execution to the device to be controlled; and executing the control command and transmitting status information, via the BLE data connection between the mobile terminal and the device to be controlled via the BLE module, the mobile terminal and the connection between the mobile terminal and the device management server, to the device management server.