Registration of an internet of things (IoT) device using a physically uncloneable function

A registration method for an Internet of Things (IoT) device, the IoT device having credentials comprising a private identifier, or a public identifier accompanied by a private identifier, the method comprising:

• the IoT device sending encrypted credentials to an association server;
• the association server forwarding the registration request and the encrypted credentials to a registration server, the registration server coupled to a device database associating each public identifier with a private identifier, the registration server decrypting the credentials, comparing the credentials with a matching entry in the device database and responding with a registration denial when the credentials do not match the device database, the association server otherwise providing a registration acknowledgement to the IoT device;
• and where the registration server receives the registration request accompanied by a gateway Identifier (ID) for the registration request, the registration server comparing the gateway ID of the registration request with a gateway identifier associated with the encrypted credentials of the IoT device in a gateway database, and if the gateway ID of the registration request is associated with the gateway identifier in the gateway database, responding with an encrypted registration acknowledgement, and if the gateway ID of the registration request is not associated with the gateway identifier in the gateway database, responding with a registration refusal.

A registration server for Internet of Things (IoT) registration, the registration server having:

• a gateway database containing associations between public identifier (public_ID) and a gateway identifier (gateway_ID);
• a device database containing a private identifier (private_ID) and optionally an association with a public identifier (public_ID);
• the registration server receiving IoT device database registration requests;
• upon receipt of an IoT device database registration request which includes encrypted credentials, the registration server decrypting the encrypted credentials into a private_ID or a private_ID accompanied by a public_ID, the private_ID or private_ID and public_ID compared with the device database, and if a match is found, the registration server responding with a registration acknowledgement.

A registration system configured to register an Internet of Things (IoT) Unit to a network, the IoT unit having an associated IoT device, a public identifier, a private identifier, and encrypted credentials for transmission with a registration request, the registration system comprising:

• a registration server coupled to a database containing private identifiers or public identifiers associated with private identifiers corresponding to possible IoT device public identifiers or private identifiers;
• an association server configured to receive one or more registration requests from an IoT device;
• when the association server receives the registration request from an IoT device known to the association server, the association server allowing the IoT device on the network;
• when the registration request is from an IoT device not known to the association server, the association server forwarding the registration request to the registration server;
• the registration server, upon receipt of the forwarded registration request, decrypting the encrypted credentials and searching in the database for a match between the credentials of the forwarded registration request and the contents of the registration server database;
• if a match is found, the registration server sending a registration acknowledgement to the association server;
• if a match is not found, the registration server sending a registration denial to the association server;
• and where the registration server receives the registration request accompanied by a gateway Identifier (ID) for the registration request, the registration server comparing the gateway ID of the registration request with a gateway identifier associated with the encrypted credentials of the IoT device in a gateway database, and if the gateway ID of the registration request is not associated with the gateway identifier in the gateway database, responding with a registration refusal.