Secure activation, service mode access and usage control of IOT devices using bearer tokens

A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors cause the processors to implement a method of activating a service mode of a first device, the method including:

• the first device includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), including a unique key stored in memory of the first device and a local proximity interface for receiving the MATwC;
• the method including:
• the first device accepting a connection with a second device over the local proximity interface and receiving from the second device a request to enter the service mode, the request including a MATwC;
• wherein the MATwC
• originated with an authorization server (AS) as a Macaroon access token (MAT) using the unique key of the first device;
• and
• the MAT was modified by appending one or more caveats that narrowed authorization provided by the MAT with at least an expiration time and date, and applied a message authentication code (MAC) chaining algorithm to sign a resulting MAT with caveats (MATwC);
• and
• the first device performing local authentication of the MATwC, evaluating the appended caveats and determining that the expiration time and date have not passed, and entering the service mode as requested and consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.

A method of activating a service mode of a first device, wherein:

• the first device includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), including a unique key stored in memory of the first device and a local proximity interface for receiving the MATwC;
• the method including:
• a second device used by a service technician receiving the MATwC;
• the second device establishing a connection with the first device over the local proximity interface and sending a request to enter the service mode, the request including the MATwC;
• wherein the MATwC
• originated with an authorization server (AS) as a Macaroon access token (MAT) using the unique key of the first device;
• and
• the MAT was modified by appending one or more caveats that narrowed authorization provided by the MAT with at least an expiration time and date, and applied a message authentication code (MAC) chaining algorithm to sign a resulting the MATwC;
• and
• the first device performing local authentication of the MATwC, evaluating the appended caveats and determining that the expiration time and date have not passed, and entering the service mode as requested and consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.

A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors cause the processors to implement a method of activating a service mode of a first device, the method including:

• the first device includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), including a unique key stored in memory of the first device and a local proximity interface for receiving the MATwC;
• the method including:
• a second device used by a service technician receiving the MATwC;
• the second device establishing a connection with the first device over the local proximity interface and sending a request to enter the service mode, the request including the MATwC;
• wherein the MATwC
• originated with an authorization server (AS) as a Macaroon access token (MAT) using the unique key of the first device;
• and
• the MAT was modified by appending one or more caveats that narrowed authorization provided by the MAT with at least an expiration time and date, and applied a message authentication code (MAC) chaining algorithm to sign a resulting the MATwC;
• and
• the first device performing local authentication of the MATwC, evaluating the appended caveats and determining that the expiration time and date have not passed, and entering the service mode as requested and consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.

A method of providing limited usage of a first device, wherein:

• the first device includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), including a unique key stored in memory of the first device and a local proximity interface for receiving the MATwC;
• the method including:
• the first device accepting a connection with a second device over the local proximity interface and receiving from the second device a request to enter a limited usage mode, the request including a Macaroon access token with caveats (MATwC);
• wherein the MATwC
• originated with an authorization server (AS) as a Macaroon access token (MAT) using the unique key of the first device;
• and
• the MAT was modified by appending one or more caveats that narrowed authorization provided by the MAT with the limited usage mode, and applied a message authentication code (MAC) chaining algorithm to sign a resulting MAT with caveats (MATwC);
• and
• the first device performing local authentication of the MATwC, evaluating the appended caveats and entering the limited usage mode as requested and consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.

A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors cause the processors to implement a method of providing limited usage of a first device, the method including:

• the first device includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), including a unique key stored in memory of the first device and a local proximity interface for receiving the MATwC;
• the method including:
• the first device accepting a connection with a second device over the local proximity interface and receiving from the second device a request to enter a limited usage mode, the request including a Macaroon access token with caveats (MATwC);
• wherein the MATwC
• originated with an authorization server (AS) as a Macaroon access token (MAT) using the unique key of the first device;
• and
• the MAT was modified by appending one or more caveats that narrowed authorization provided by the MAT with the limited usage mode, and applied a message authentication code (MAC) chaining algorithm to sign a resulting MAT with caveats (MATwC);
• and
• the first device performing local authentication of the MATwC, evaluating the appended caveats and entering the limited usage mode as requested and consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.

A method of providing limited usage of a first device, wherein:

• the first device includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), including a unique key stored in memory of the first device and a local proximity interface for receiving the MATwC;
• the method including:
• a second device used by a service technician receiving the MATwC;
• the second device establishing a connection with the first device over the local proximity interface and sending a request to enter a limited usage mode, the request including the MATwC;
• wherein the MATwC
• originated with an authorization server (AS) as a Macaroon access token (MAT) using the unique key of the first device;
• and
• the MAT was modified by appending one or more caveats that narrowed authorization provided by the MAT with the limited usage mode, and applied a message authentication code (MAC) chaining algorithm to sign a resulting the MATwC;
• and
• the first device performing local authentication of the MATwC, evaluating the appended caveats and entering the limited usage mode as requested and consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.

A tangible non-transitory computer readable storage media, including program instructions loaded into memory that, when executed on processors cause the processors to implement a method of providing limited usage of a first device, the method including:

• the first device includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), including a unique key stored in memory of the first device and a local proximity interface for receiving the MATwC;
• the method including:
• a second device used by a service technician receiving the MATwC;
• the second device establishing a connection with the first device over the local proximity interface and sending a request to enter a limited usage mode, the request including the MATwC;
• wherein the MATwC
• originated with an authorization server (AS) as a Macaroon access token (MAT) using the unique key of the first device;
• and
• the MAT was modified by appending one or more caveats that narrowed authorization provided by the MAT with the limited usage mode, and applied a message authentication code (MAC) chaining algorithm to sign a resulting the MATwC;
• and
• the first device performing local authentication of the MATwC, evaluating the appended caveats and entering the limited usage mode as requested and consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.