Method and device for uniform resource identifier handling of user device

A user device (110) is connected to a web server (120) via a network (130). An owner (140) communicates with the web server and has a communication channel (141) to the user device. The owner initiates an URI assignment request to the user device and obtains the device credentials via the communication channel (141). The owner provides the credentials to the web server via a communication channel (121). The web server sends the credentials to the user device which compares the credentials with its memory (110a) and replies with the URI status. The web server sends the URI assignment to the user device which accepts and confirms back to the web server which sends a locking message to the user device. The owner can revoke the URI using a password that is verified by the user device, which deletes the URI. An advantage is that the owner can acquire the URI without being the owner of domain.

TECHNICAL FIELD

The present invention relates to Uniform Resource Identifier registration in a telecommunication network, and more particularly, to a method and device for assignment and revocation of such Uniform Resource Identifier registration of user device.

BACKGROUND ART

With the expansion of the internet, more and more user devices and electronic appliances are connected to the internet. It is expected that the user devices and the electronic appliances can exchange information with little manual user intervention. The internet web will not only be used to present information to the user, but also used for machines to communicate with each other.

A number of standardization efforts have been done to achieve the vision of a semantic web e.g. the standard Semantic Web Activity (W3C). This semantic web is a web of data, utilizing common formats for integration and combination of data drawn from diverse sources. It also standardizes the common language for recording how the data relates to the real world objects. One of the basic requirements is to provide a Uniform Resource Identifier (URI) to each individual resource on the internet web. Consequently, every resource on the web needs a unique identity so that it can be identified and referred to in the communication process. The network connected user devices and electronic appliances belong to the main group of resources to be used. The W3 C and The Internet Task Force (IETF) defined standards, and these standards defined the usage and format of the URI.

In U.S. Pat. No. 6,654,796-B1, a method involves assigning an IP address for a cluster, and establishing a hypertext transfer protocol (HTTP) connection from a management station to a network device. A network device management request with the URI indicating the network device and management data is received. A forwarding HTTP connection is established from the network device to an expansion network device indicated by the URI.

SUMMARY

Well defined Uniform Resource Identifier (URI) assigning and revocation procedures have not been described. It is up to each web server owner to use their own domain name for the URI assignment and revocation procedures. The majority of device owners do not own any domain; there has not been a way for them to assign or revoke URI' s to their user devices. The user device can be exemplified by a mobile phone, a laptop computer, a desktop computer, a television set, a file server MP3 player, and a digital camera. These user devices can be used i.e. in a home environment, in public places, or in a car. The electronic appliances can be exemplified by a refrigerator, a washing machine, a dish washing machine, and various other kitchen machines. There can be some overlap between the user devices and the electronic appliances, such as the television set. In the present description the expression ‘user device’ covers both an user apparatus devices and the electronic appliances.

An object of the invention is to present a handling procedure, an arrangement, an assignment procedure node and revocation procedure node for assigning and revoking the URI, which procedure is made for networked devices in an internet web. The user device resources will not only be identified and represented on the internet, they can also be reached and regulated on a network. They can provide or access the networked services. When the user device is connected to the internet, it will obtain the URI assigned by the user device owner. Further the user device owner will be denoted as an owner.

In a telecommunication network, the handling procedure, the arrangement, the assignment procedure node and said revocation procedure node are devised for handling the URI for the user device. The owner performs the handling via a web server wherein an IP connection is established between the web server and the user device. This handling procedure includes an assigning procedure of assigning said URI to said user device. The assigning procedure includes the steps of sending an assignment request with a credential message to the user device and sending an assignment response with a specification of the URI status of the user device. The procedure further includes sending an URI assignment to the user device and sending a locking message to lock the URI of the user device. Here the URI is a sub-domain of the web server.

An option is to store such said URI designations on said web server.

Another option is to provide a mechanism for assigning a plurality of said URI per said user device. Thus the user device can have multiple URI's, if it gets a first owner's permission and the user device capability supports it.

The handling procedure also as an option includes a revocation procedure for said URI of said user device by said owner via said web server. This revocation procedure further includes the steps of sending an unlock owner status request with a revoke URI message to the user device; and sending an unlock response with a revoke response of the user device. A further option is to provide for removing said URI on the web server.

Still another option is to provide a mechanism for removing said URI on a device memory.

Still another option is to provide a mechanism in the web server for generating a time limited code and sending said time limited code to the user device. In another option the web server has the mechanism for verifying the time limited code within a pre-determined time interval.

Thus a method for assigning and revocation of URI's for networked devices is provided with flexible procedure to update user devices with minimal impact on existing services. The owner that does not own a domain name can assign or revoke URI's.

In another aspect of the present invention, there are provisions for a assignment procedure node in the telecommunication network which is adapted for assigning at least one URI to said user device wherein the IP connection is established between the web server and the user device.

In another aspect of the present invention, there are provisions for a revocation procedure node in the telecommunication network which is adapted for revocation at least one URI to said user device wherein the IP connection is established between the web server and the user device.

The assignment procedure node has a first I/O means accessing the web server coupled via the network and a second I/O means connected to said user device for outputting an intrinsic information from said user device to said owner. Further the assignment procedure node has an assign request device connected to the first I/O means and the user device being adapted to send the assignment request with the credential message to the user device. The assignment procedure node further has an assign response device connected to the first I/O means and the user device, being adapted to send the assignment response with specification of the URI status of the user device. Further the assignment procedure node has an URI assign device connected to the first I/O means and the user device, being adapted to send for sending the URI assignment to the user device; and further a locking message device connected to the first I/O means and the user device, being adapted to send the locking message to lock the URI of the user device; wherein the URI is a sub-domain of the web server.

The revocation procedure node has a first I/O means accessing the web server coupled via the network and a second I/O means connected to said user device for communication from said user device to the owner. Further the revocation procedure node has an unlock status device connected to the first I/O means and the user device, being adapted to send the unlock owner status request with the revoke URI message to the user device. The revocation procedure node further has an unlock response device connected to the first I/O means and the user device, being adapted to send the unlock response with the revoke response of the user device.

DETAILED DESCRIPTION

The detailed description presents a handling procedure for assigning and revoking a Uniform Resource Identifier (URI) which procedure is devised for a networked arrangement for user devices and electronic appliances in an internet web. The user device can be exemplified by a mobile phone, a laptop computer, a desktop computer, a television set, a file server MP3 player, and a digital camera. These user devices can be used i.e. in a home environment, in public places, or in a car. The electronic appliances can be exemplified by a refrigerator, a washing machine, a dish washing machine, and various other kitchen machines. There can be some overlap between the user devices and the electronic appliances, such as the television set.

A networked device can be all the above said user device and/or said electronic appliance with communication capabilities with other the other devices and the electronic appliances. Different technologies could be used for communications such as Bluetooth, WLAN, UMTS, Wimax, NFC, and a Zigbee zone. Typical said networked devices are mobile phone, laptop, game console with network capabilities such as a PS3 console, a Wii console, a Xbox console, a PSP console, a file server, a Slingbox, and a Wifi camera. The user devices and the electronic appliances will be identified and represented on the internet. Further the user devices and the electronic devices can also be reached and regulated on a network by a device owner.

FIG. 1shows, an arrangement100according to present invention where said user devices and electronic appliances110is connected to a web server120coupled via a network130. Further exists a communication channel131and a communication channel111for communication between said web server120and the network130, and the user device and electronic appliances110and the network130respectively. Further there is a secondary communication channel121between said web server120and the device owner140and/or a communication device142for communication with the web server120among others. The communication device142is able to communicate with the web server120in either an autonomous or a semi-autonomous manner with assistance of the device owner140. There exists a third communication channel141between the user device and electronic appliances110and said device owner140and/or the communication device142. As will be explained later in various alternatives, their exists a possibility where the device owner140can directly or by using the communication device142, can access the user device and the electronic appliance110. Further the communication device142can access the user device and the electronic appliance110in either an autonomous manner or semi-autonomous manner. For all practical purposes, the device owner140is synonymous with the communication device142unless if important will be highlighted.

For clarity, the word a user device hence forward is to represent both user device and electronic appliance110as noted above. Further a user device will be also denoted as a personal device and a networked device. Further the device owner140will be denoted as an owner and/or a controller depending on different phase of the handling procedure and ownership. Any user may be the controller of the user device. Once the URI has been assigned, the controller becomes the owner of the user device.

The user device has a device memory110aallocated to store its URI and a status indicator110bto indicate if the user device currently is locked to an owner. A new user device does not have said URI, it has to connect via said network130to a web server120to obtain its URI as illustrated inFIG. 1.

When the networked device is connected to the network130, it will function as a normal networked device to establish for example an IP connection with other network nodes. However, it does not have an URI. Therefore, it cannot be identified and be referred to in a semantic web context. To obtain an URI, the user device needs to establish a connection using the first communication channel111,131with the web server120through the network130. The transport protocol could be a Transmission Control Protocol (TCP), a User Datagram Protocol (UDP) or any other appropriate protocol. Security can be achieved by using a IP security (IPSec), a Transport Layer Security (TLS), a Secure Sockets Layer (SSL) or other security protocols. When said user device is connected to the internet, it will obtain the URI assigned by said owner.

The controller has the authority to create and modify user device related content in the web server120. The owner does this using the communication device142and connecting to the web server120using a secondary communication channel121. The owner can be a proprietor of the web server120. The proprietor of web server120can be a service provider which provides URI registration services. The owner can also have a personal account at the web server120so that he can manage the personal devices. In general, the owner does not need to own any domain.

The network130can be any kind of network, such as a Wide Area Network (WAN), a cellular network, or a Local Area Network (LAN). The connection, the third communication channel141between the user device and the owner and/or the communication device142can comprise a Bluetooth, a Near Field Communication (NFC), or a Universal Serial Bus (USB) cable connectivity. This entails also that the user device has necessary hardware and software capability within or connected externally to achieve the above mentioned functionality.

In another option, the communication device142could even be located inside/connected to the user device110. The user device can provide a communication interface toward the owner/controller, for example, through a web browser functionality of the communication device142. In such case, the third communication channel141may become an internal communication channel of the user device.

In another option, the communication channel141also includes that the owner140in person may read a label on the user device110with a device identifier to acquire the URI assignment.

An URI is an identity for a resource on the web. It is uniform for all kinds of resources, no matter if it is a human, a computer, or even an abstract concept. It is also globally unique. One URI can only mean one thing and it is specified by the owner of the URI. However, one resource can have several URI's and it is possible to specify that one URI is the same as another. The structure of URI provides not only an identity of the resource but also the possibility to access the description of the resource. The networked device may use several access technologies at the same time and it has different identity in different access networks, for example, phone number, sip address, IP address, email address, etc. A Resource Description Framework (RDF) file stored at the URI location should include the information. The user device can not be accessed using its URI only; the description file provides information on how the user device can access or provide services.

In the telecommunication network, a handling procedure is devised for handling the URI for the user device. This handling procedure will be described in connection withFIG. 2, which shows the owner140, the web server120, the network130and the user device110. A number of generic signalling and procedural steps are performed as will be described below. More specific embodiments with respect to aspects relating to a secure communication between the owner and the user device and subsequent acquiring of a device credentials will be dealt with in later part of the description.

The owner performs the handling via said web server120wherein said IP connection is established between the web server120and the user device. This handling procedure200includes an assigning procedure of assigning said URI to said user device. The assigning procedure in short is shown in a flow diagram500inFIG. 5. It starts in a step501and includes the step510of sending an assignment request210with a credential message250to the user device. In step520, the procedure of sending an assignment response260with a specification of the URI status of the user device. The procedure further in step530includes sending an URI assignment270to the user device. Finally in step540, sending a locking message290to lock the URI of the user device and the procedure ends with step541. Here the URI belongs to a sub-domain of the web server120.

FIG. 2illustrates the URI assigning procedure200in detail. A prerequisite is that a connection has established between the web server120and the user device as described above. The connection can be initiated by the user device to the web server120with the information of the owner so that only the owner can use the connection. The connection can also be initiated by the web server120. When the owner logs in to the web server120, the owner can instruct the web server120to send a connection request to an IP address of the user device which is known by the owner. The handling procedure then starts with the owner or any person trusted by the owner logs in to the URI registration web server120. In step205, the owner initiates the action of URI registration. In step210, the web server120sends an assignment request to the user device. The user device checks its device memory110aand evaluate if it is a valid request in step215. If the owner status indicator110bof the user device is not empty, the user device will reject the request with step260, informing that the assignment response is “failed”.

Otherwise, the user device requests the credentials from the web server120in a step220that forwards the request to the owner. The owner can obtain the credentials by obtaining the intrinsic information in the form of reading a label on the user device or obtaining it from the manufacture. The owner can also obtain the credentials via short range radio such as the Bluetooth, the NFC, RFID, or by connecting the Universal Serial Bus USB cable to the communication device142. The credential can be a tag generated by the user device with a one-time time-limited code. The owner can also acquire such information by simply reading it on a label on the user device or a device literature from a device manufacturer. The embodiments relating to above will be dealt in detail in subsequent text. In step240, the owner provides the credentials (codes) to the web server120. The web server120responses the user device with the requested credential message in the step250. The user device verifies the recovered credentials (codes) in step255by comparison with the credentials in the device memory110a. If it is acceptable, the user device will response with assignment accepted in step260. Otherwise, it will response with the “failed” message.

The web server120sends the URI assignment to the user device in step270. The URI has to belong to the sub-domain of the web server120so that it can be reached from the Internet and its content can be modified by the owner. For example, if the web server120has a domain name: “webserver2007.com”, the URI can be the format of “http://webserver2007.com/owner01/device05”. In step275, the user device stores the assigned URI in its device memory110awhich e.g. can be a ROM memory type so that it is resistant to power loss. In step280, the user device responses to the web server120with a “success” message or a “failed” message if the storage process is not completed correctly. When the web server120receives the “success” response, it will lock the owner status in step290with the locking message. The owner status can be locked with the owner defined password and/or a connection to the web server120so that it can only be unlocked from the specified web server120. In step295, the owner creates the description file to the user device and stores it as the RDF file at the location pointed by URI in step297. The description file can contain the owner information, the user device capability and communication protocols. It can also contain alternative URI's assigned by other users and agreed by the owner.

An URI is an identity for a resource on the web. It is uniform for all kind of resources, no matter if it is a human, a computer, or even an abstract concept. It is also globally unique. One URI can only mean one thing and it is specified by the owner of the URI. However, one user device can have several URI's and it is possible to specify that one URI is the same as another. The structure of URI provides not only an identity of the user device but also the possibility to access the description of the user device. The networked device may use several access technologies at the same time and it has different identity in different access networks, for example, phone number, sip address, IP address, email address, etc. The RDF file stored at the URI location should include the information. The user device can not be accessed using its URI only; the description file provides information on how the user device can access or provide services.

In the following text, two embodiments will be discussed providing specific steps pertaining to the owner acquiring device credentials. According to a first embodiment, any user may be the controller of the user device. Once the URI has been assigned, the controller becomes the owner of the user device, i.e. no one else has access to change the device memory110aand the status indicator110b. According to a second embodiment, ownership of a user device is determined initially, exemplary at acquisition of said user device. Further details follow below.

Next, the first embodiment is discussed in detail. It is observed that any user having the device identifier can perform the assigning procedure and there is no requirement that the user in question is located close to the user device when performing the URI assignment. Having obtained the device identifier, the assigning procedure can be executed anytime.

Therefore, to safeguard against such intrusion, the assigning procedure is arranged such that the controller must be located close to the user device for the assigning procedure to take place. So there exists a mechanism in the web server120for generating a time limited code and sending said time limited code to the user device110via the network130. As an example, the assigning procedure comprises the following basic steps. In step one, to locate the controller close to the user device in order to read a tag (e.g. using RFID; NFC to acquire an intrinsic information). In step two, to perform steps250and260. In step250, the web server120may send a one time code along with the tag details. Alternatively, the web server120may repeat step250multiple times to send the one time code separately from the tag details.

In step three, just before execution of step270, the web server120may request the controller to read the tag and respond within a pre-determined (short) time interval to the web server120along with the code. If the web server120verifies the code, the procedure continues to perform the step270and consequent steps in signaling diagram200inFIG. 2. So the web server120has the mechanism for verifying the time limited code within a pre-determined time interval. Otherwise, perform a revoke assignment and send error message to the controller. After step290send acknowledgement to controller that assignment is complete and user device is locked. In another option, the user device may confirm the controller's proximity to the web server120.

The assigning procedure can only be completed by the controller being in the proximity to the user device for receiving an acknowledgement of completed assignment. The problem is thus avoided for a possible intrusion by a unwanted user locking the user device that said owner has acquired for installation in a home environment and said URI assignment is not completed.

In another exemplary option, if the user device is capable of loading the tag with the code, it may be utilized in the credential verification step255. The controller reads the tag and provides the code to the web server120for verification that the controller is in the proximity of the user device. The tag which may be outputted for one time use, may be generated by the user device internally or by a third party trusted service provider.

According to the second embodiment, ownership is established at acquisition of the user device. The device credentials are stored in a tamper proof area of the user device and are basically secret, i.e. it can not be read on a device interface.

The owner obtains the device credentials through some means that fulfills necessary security and integrity. In another option, the owner obtains the device credentials through a secure connection to a device seller's server and installs it in a tamper proof area of a mobile phone (e.g. SIM-card).

Thereafter, steps240and onwards are performed in the signaling diagram200inFIG. 2.

According to the above embodiment, the assignment procedure requires the controller to have access to the device credentials. The problem of proximity to the user device during assignment is not relevant here as above but is solved in an alternate way.

In another option the credentials provided in step240are stored with the web server120in an owner private area whereby any user, capable of connecting to the web server and having a valid password, may use the device credentials to authenticate for update of the device memory110aand the status indicator110b.

Further in an embodiment there are provisions for storing such said URI designations in a web server memory120aof said web server120.

In still another embodiment, there exists a mechanism for assigning a plurality of said URI per said user device.FIG. 1shows the possibility of storing in multiple URI{1 . . . n} both in the user device and the web server120. Thus the user device can have multiple URI's, if it gets a first owner's permission and the user device capability supports it. Different URI can be assigned by different URI owners. Other URIs have to be added by the owner to a URI description RDF file and possibly also in the device memory110a, if the user device capability supports it. Other URI's are generally assigned on other web servers by the users who are not defined as the owner. Since it is not possible to assign URI to the user device directly when the status indicator110bof the user device is already locked. The additional URIs can only be added to the URI description file by the owner to indicate that there are other valid URIs for the user device.

The handling procedure also includes a revocation procedure, which in short is shown in the flow diagram600inFIG. 6. The revocation procedure is for a revocation of said URI of the user device by the owner via the web server120. It starts in step601, and further in step610, the web server120sends an unlock owner status request to the user device. In step620, web server120sends a revoke URI message to the user device. Finally in step630, the user device sends an unlock response with a revoke response of the user device and the procedure ends with step631.

The revocation procedure is illustrated inFIG. 3in detail steps300. The owner provides a locking password to the web server120in a step310. This revocation procedure further includes the web server120coupled via the network130sending said unlock owner status request to the user device in a step320. The user device in step320a, verifies the password within its device memory110aand the owner status indicator110b. If it is successful, said user device unlocks the owner status and sends a “success” or said unlock response in step330. Otherwise, if the password is incorrect the said user device sends a “failed” response in step330. With the unlock response in step330, the web server120sends a revocation request or said revoke URI message in step340to the user device. The user device deletes the URI from the device memory110ain step340aand sends a confirmation in a said revoke response to the web server120in step350. After a successful revocation, web server120removes the URI registry in step360. After this procedure, the aforementioned URI is no longer a valid URI. The procedure can be used to have a multiple revocation procedure in case there are multiple URI entries stored in the user device. The procedure can only be used for the main URI. Other URIs are updated through modifying the URI description file.

Thus the method and arrangement for the handling procedure, comprising the assigning and revocation of said URI's for said user devices, is provided with flexible procedure to update said user devices with minimal impact on existing services. Further the owner that does not own a domain name can assign or revoke URI's. The description about the URI of said user device can only be changed by its owner. The user device can only be contacted by the means specified by the URI description.

In another aspect of the present invention shown inFIG. 4, an arrangement400, which has provisions for an assignment procedure node410in the telecommunication network. The assignment procedure node410is adapted for handling assigning of at least one URI to said user device wherein the IP connection is established between the web server120and the user device. This assignment procedure node410is adapted for the assigning of the URI for the user devices.

InFIG. 4, the assignment procedure node410is coupled to the web server120via the network130. The assignment procedure node410is connected with the network130via a first I/O means411. Further the assignment procedure node410has a secondary I/O means412to communicate with the owner140and the communication device142. The assignment procedure node410comprises further the user device110, an assign request device413, an assign response device414, an URI assign device415and finally a locking message device416.

A bus417connects the aforementioned devices411,412,413,414,415,416within the assignment procedure node410. The bus417can be imbedded in a hardware or a software scheme within the assignment procedure node410. Further the bus417can be implemented in a wire line or a wireless scheme within the assignment procedure node410.

The second I/O means412is connected via the bus417to said user device for outputting the intrinsic information from said user device to the owner.

This second I/O means412may use the Bluetooth, the NFC, or by connecting the Universal Serial Bus USB cable to the communication device142. The owner can also acquire such information by simply reading it on a label on the user device or from the device literature from the device manufacturer.

The assign request device413is connected via the bus417to the first I/O means411and the user device. The assign request device413is adapted to send the assignment request210with the credential message250to the user device. Further the assign response device414is connected via the bus417to the first I/O means411and the user device. The assign response device414is adapted to send the assignment response260with specification of the URI status of the user device.

The URI assign device415is connected via the bus417to the first I/O means411and the user device. The URI assign device is adapted to send the URI assignment270to the user device. The locking message device416is connected via the bus417to the first I/O means411and the user device110. The locking message device416is adapted to send the locking message290to lock the URI of the user device. Further the URI belongs to a sub-domain of the web server120.

It is to be understood that the various embodiments discussed with respect to the signalling diagram200of theFIG. 2can be provided for by the assignment procedure node with minimal adaptations.

In another aspect of the present invention shown inFIG. 7, an arrangement700, which has provisions for an revocation procedure node710in the telecommunication network. The revocation procedure node710is adapted for handling revocation of at least one URI to said user device wherein the IP connection is established between the web server120and the user device. This revocation procedure node710is adapted for the revocation of the URI for the user devices.

InFIG. 7, the revocation procedure node710is coupled to the web server120via the network130. The revocation procedure node710is connected with the network130via a first I/O means711. Further the revocation procedure node710has a secondary I/O means712to communicate with the owner140and the communication device142. The revocation procedure node710comprises further the user device110, an unlock status device713, an unlock response device414.

A bus717connects the aforementioned devices711,712,713,714within the revocation procedure node710. The bus717can be imbedded in a hardware or a software scheme within the revocation procedure node710. Further the bus717can be implemented in a wire line or a wireless scheme within the revocation procedure node710.

The second I/O means712is connected via the bus717to said user device110for communication from said user device to the owner. This second I/O means712may use the Bluetooth, the NFC, or by connecting the Universal Serial Bus USB cable to the communication device142.

The unlock status device713is connected via the bus717to the first I/O means711and the user device. The unlock status device713is adapted to send the unlock owner status request320with the revoke URI message340to the user device. Further the unlock response device714is connected via the bus717to the first I/O means711and the user device. The unlock response device714is adapted to send the unlock response330with the revoke response350of the user device.

Further the URI belongs to a sub-domain of the web server120. It is to be understood that the various embodiments discussed with respect to the signalling diagram300of theFIG. 3can be provided for by the revocation procedure node710with minimal adaptations.