Back to results
US 11,144,911 B2Granted
Technologies for device commissioning
AssigneeIntel Corporation
InventorsNed M. Smith, David W. Grawrock, Geoffrey H. Cooper
Life of this patent
Estimating the term…
Abstract
Technologies for device commissioning include a rendezvous server to receive, from a buyer device, a request to transfer ownership of a compute device to the buyer device. The rendezvous server verifies the provenance of the compute device based on a block chain and establishes a secure session with the compute device in response to verification of the provenance. The block chain identifies each transaction associated with ownership of the compute device.
Claims23
A rendezvous server for automated device commissioning, the rendezvous server comprising:
- one or more processors coupled to memory, the one or more processors to host and facilitate:
- an ownership transfer circuitry to receive, from a buyer device, a request to transfer ownership of a compute device to the buyer device;
- and
- a verification circuitry to:
- verify provenance of the compute device based on a block chain, wherein the block chain identifies each transaction associated with ownership of the compute device;
- send an instruction to the compute device to perform an attestation to the rendezvous server using a private Enhanced Privacy Identification (EPID) key provisioned in a trusted execution environment (TEE) of the compute device by a manufacturer of the compute device;
- receive, in response to the instruction sent to the compute device to perform the attestation, an attestation quote from the compute device, wherein the attestation quote is generated with use of the private EPID key;
- and
- verify the attestation quote with use of a public EPID key corresponding to the private EPID key,
- wherein the ownership transfer circuitry is further to instruct the compute device to update its ownership to identify the buyer device as the owner, and
- wherein the ownership transfer circuitry is further to receive a message signed by the buyer device indicative of an alternative rendezvous server to be used to transfer ownership of the compute device to a second buyer device and update the block chain to identify the alternative rendezvous server.
8 more elements
A method for device commissioning by a rendezvous server, the method comprising:
- receiving, by the rendezvous server and from a buyer device, a request to transfer ownership of a compute device to the buyer device;
- verifying, by the rendezvous server, provenance of the compute device based on a block chain, wherein the block chain identifies each transaction associated with ownership of the compute device;
- instructing, by the rendezvous server, the compute device to perform an attestation to the rendezvous server using a private Enhanced Privacy Identification (EPID) key provisioned in a trusted execution environment (TEE) of the compute device by a manufacturer of the compute device;
- receiving, by the rendezvous server and in response to instructing the compute device to perform the attestation, an attestation quote from the compute device, wherein the attestation quote is generated with use of the private EPID key;
- and
- verifying, by the rendezvous server, the attestation quote with use of a public EPID key corresponding to the private EPID key;
- and
- instructing, by the rendezvous server, the compute device to update its ownership to identify the buyer device as the owner,
- wherein the transferring of ownership further includes receiving a message signed by the buyer device indicative of an alternative rendezvous server to be used to transfer ownership of the compute device to a second buyer device and updating the block chain to identify the alternative rendezvous server.
6 more elements
One or more non-transitory machine-readable storage media comprising a plurality of instructions stored thereon that, when executed, cause a computing device to:
- receive, from a buyer device, a request to transfer ownership of a compute device to the buyer device;
- verify provenance of the compute device based on a block chain, wherein the block chain identifies each transaction associated with ownership of the compute device;
- send an instruction to the compute device to perform an attestation to the rendezvous server using a private Enhanced Privacy Identification (EPID) key provisioned in a trusted execution environment (TEE) of the compute device by a manufacturer of the compute device;
- receive, in response to the instruction sent to the compute device to perform the attestation, an attestation quote from the compute device, wherein the attestation quote is generated with use of the private EPID key;
- and
- verify the attestation quote with use of a public EPID key corresponding to the private EPID key;
- and
- instruct the compute device to update its ownership to identify the buyer device as the owner,
- wherein the transferring of ownership further includes receiving a message signed by the buyer device indicative of an alternative rendezvous server to be used to transfer ownership of the compute device to a second buyer device and updating the block chain to identify the alternative rendezvous server.
6 more elements
Dependencies are inferred from the claim text.