Persona and device based certificate management
AssigneeT-Mobile USA, Inc.
InventorsAhmad Arash Obaidi, Eric W. Yocam
Life of this patent
Estimating the term…
Abstract
A user device implements a certificate authority for issuing digital certificates that extend to other computing devices a level of trust to a particular user paired with the user device. The user device may obtain user persona information, generate a user key, and combine the user key with a device key for the generation of a digital certificate. The computing device may further transmit the digital certificate to a certificate management system, which manages interactions between other computing devices and the user device or authorizes operation of other computing devices by the particular user based on the digital certificate.
Claims13
A computer implemented certificate management system comprising:
- a first electronic data repository storing digital certificates associated with particular user-device pairings;
- a second electronic data repository storing reaction policies for computing devices under management of the certificate management system;
- and
- a computer system comprising one or more processors, the computer system configured to at least:
- receive a target digital certificate from a target computing device, wherein the target digital certificate certifies a pairing of a target user and the target computing device;
- store the target digital certificate in the first electronic data repository;
- associate one or more reaction policies with the target digital certificate;
- receive a request for a reaction policy from a reacting computing device, wherein the request includes identification information regarding the target computing device and wherein the reacting computing device initiates the request responsive to the reacting computing device detecting the target computing device;
- identify the target digital certificate from the first electronic data repository based, at least in part, on the identification information;
- obtain the one or more reaction policies associated with the target digital certificate;
- and
- cause the reacting computing device to perform actions in accordance with the one or more reaction policies;
- wherein the target digital certificate is issued by a certificate authority implemented on the target computing device;
- and
- wherein the certificate authority resides at the lowest hardware level of the target computing device.
Dependencies are inferred from the claim text.