Managing entitlement
AssigneeHewlett-Packard Development Company, L.P.
InventorsJoshua Serratelli Schiffman, Christopher Charles Mohrman, Luke T. Mather
Life of this patent
Estimating the term…
Abstract
A method for managing entitlement of a device to access a service, the method comprising providing an authenticated identity for the device, the authenticated identity including a public encryption key pair associated with the device signed by a trusted authority, and generating a device entitlement certificate encoding an authorisation related to the service and including a public key of the public encryption key pair associated with the device, wherein the device entitlement certificate is signed by the trusted authority.
Claims14
A method for managing entitlement of a device to access a service, the method comprising:
- providing an authenticated identity for the device, the authenticated identity including a public encryption key pair associated with the device signed by a trusted authority;
- and generating a device entitlement certificate encoding an authorisation related to the service and including a public key of the public encryption key pair associated with the device, wherein the device entitlement certificate is signed by the trusted authority and wherein the device entitlement certificate restricts the authorisation to a physical location.
Apparatus, comprising a memory to store:
- an entitlement certificate signed by a trusted authority encoding an authorisation related to a service and including a public key of a public encryption key pair associated with the apparatus, wherein the device entitlement certificate restricts the authorisation to a physical location;
- an authenticated apparatus identity comprising the public encryption key pair associated with the apparatus that has been signed by the trusted authority;
- and a processor to:
- request access to the service;
- and provide the entitlement certificate as part of the request or in response to an entitlement query from the service.
A machine-readable storage medium encoded with instructions for managing entitlement of a device to access a service, the instructions executable by a processor of a trusted signing authority apparatus to cause the apparatus to:
- generate an authenticated identity for the device, the authenticated identity including a public encryption key pair associated with the device signed by a trusted authority;
- and generate a device entitlement certificate encoding an authorisation related to the service and including a public key of the public encryption key pair associated with the device, wherein the device entitlement certificate is signed by the trusted authority and wherein the device entitlement certificate restricts the authorisation to a physical location.
Dependencies are inferred from the claim text.