Secure access to resources
AssigneeBitwards Oy
InventorJan-Erik Ekberg
Life of this patent
Estimating the term…
Abstract
According to an example aspect of the present invention, there is provided an apparatus comprising a memory configured to store a user key, a token relating to a resource, the token comprising the user key in encrypted form, and management data received in the apparatus from a server, and at least one processing core configured to participate in an access interaction with the resource, the access interaction being based at least partly on the token and the user key and the access interaction comprising first sending the management data to the resource and then completing the access interaction to access the resource.
Claims19
A user device comprising:
- a memory configured to store:
- a user key;
- a token relating to a resource, the token comprising the user key in encrypted form, and
- management data received in the user device from a server, the management data comprising revocation data blacklisting at least two users other than a user of the user device or at least two tokens other than the token, preventing the at least two users or the at least two tokens from accessing the resource;
- at least one processing core configured to:
- participate in an access interaction with the resource, the access interaction being based at least partly on the token and the user key and the access interaction comprising first sending the management data to the resource and then completing the access interaction to access the resource.
An apparatus comprising:
- a memory configured to store:
- a resource key, and
- management data, the management data comprising revocation data blacklisting at least two users or at least two tokens, preventing the at least two users or the at least two tokens from accessing the apparatus;
- at least one processing core configured to:
- participate in an access interaction with a specific user device, a user of the specific user device not comprised in the at least two users, the access interaction being based at least partly on a token other than the at least two tokens and a key and the access interaction comprising first receiving the management data from the specific user device and then completing the access interaction to grant access to the specific user device.
A method in user device, comprising:
- storing a user key and a token relating to a resource, the token comprising the user key in encrypted form, and management data received in the user device from a server, the management data comprising revocation data blacklisting at least two users other than a user of the user device or at least two tokens other than the token, preventing the at least two users or the at least two tokens from accessing the resource, and
- participating in an access interaction with the resource, the access interaction being based at least partly on the token and the user key and the access interaction comprising first sending the management data to the resource and then completing the access interaction to access the resource.
A method in an apparatus, comprising:
- storing a resource key and management data, the management data comprising revocation data blacklisting at least two users or at least two tokens, preventing the at least two users or the at least two tokens from accessing the apparatus, and
- participating in an access interaction with a specific user device, a user of the specific user device not comprised in the at least two users, the access interaction being based at least partly on a token other than the at least two tokens and a key and the access interaction comprising first receiving the management data from the specific user device and then completing the access interaction to grant access to the specific user device.
A non-transitory computer readable medium having stored thereon a set of computer readable instructions that, when executed by at least one processor, cause a user device to at least:
- store a user key and a token relating to a resource, the token comprising the user key in encrypted form, and management data received in the user device from a server, the management data comprising revocation data blacklisting at least two users other than a user of the user device or at least two tokens other than the token, preventing the at least two users or the at least two tokens from accessing the resource, and
- participate in an access interaction with the resource, the access interaction being based at least partly on the token and the user key and the access interaction comprising first sending the management data to the resource and then completing the access interaction to access the resource.
Dependencies are inferred from the claim text.