Back to results
US 11,777,926 B2Granted
Internet of things (IoT) device management
AssigneeCryptography Research, Inc.
InventorsDenis Alexandrovich Pochuev, Michael A. Hamburg, Pankaj Rohatgi, Amit Kapoor, Joel Patrick Wittenauer
Life of this patent
Estimating the term…
Abstract
The embodiments described herein describe technologies to address initial establishment of device credentials in an Internet of Things (IoT) infrastructure. The embodiments are directed to unifying secure credential establishment regardless of the endpoint type, thus addressing the challenge of a great diversity among IoT devices. This approach is designed to address a challenge of initial trusted enrollment of the IoT endpoints into a secure infrastructure, which allows secure communications between the devices in the IoT environment.
Claims29
A method comprising:
- receiving, at a device provisioning service, a message from an internet of things (IoT) device to securely provision the IoT device, the message comprising a profile identifier and a provisioning request;
- retrieving provisioning policy information using the profile identifier;
- determining a Root of Trust (RoT) authentication service to authenticate and authorize the IoT device;
- sending, by the device provisioning service, a redirect response to the IoT device to redirect the IoT device to the RoT authentication service to authenticate and authorize the IoT device, wherein the redirect response comprises an encrypted policy identifier used to authenticate the IoT device,
- receiving, at the device provisioning service, a provisioning request comprising a token issued by the RoT authentication service;
- validating the provisioning request and the token;
- and
- when the provisioning request and token are validated, sending provisioning information to the IoT device by the device provisioning service.
5 more elements
A method comprising:
- receiving, at a Root of Trust (RoT) authentication service from a device provisioning service, provisioning policy information that defines requirements for issuing a token;
- receiving, at the RoT authentication service, a redirect message from an internet of things (IoT) device to authenticate and authorize the IoT device, the redirect message comprising a policy identifier used to identify the provisioning policy information and a provisioning request;
- authenticating and authorizing the IoT device by the RoT authentication service according to the provisioning policy information;
- issuing a token when the IoT device is authenticated and authorized;
- and
- sending a redirect response to the IoT device with the issued token, the redirect response redirects the IoT device to the device provisioning service with the issued token for the provisioning request to securely provision the IoT device;
- exchanging, by the RoT authentication service, security credentials with the device provisioning service;
- providing a list of authentication methods to the device provisioning service, receiving a selection of an authentication method from the list;
- receiving an assignment of the policy identifier and the authentication method from the device provisioning service;
- and
- establishing session keys with the device provisioning service.
8 more elements
A system for establishing a distributed trust network, having:
- a device provisioning service to securely provision an internet of things (IoT) device, the device provisioning service to:
- receive a message from the IoT device to securely provision the IoT device, the message comprising a profile identifier and a provisioning request;
- retrieve provisioning policy information using the profile identifier;
- determine a Root of Trust (RoT) authentication service to authenticate and authorize the IoT device;
- send a redirect response to the IoT device to redirect the IoT device to the RoT authentication service to authenticate and authorize the IoT device, wherein the redirect response comprises an encrypted policy identifier used to authenticate the IoT device,
- receive a provisioning request comprising a token issued by the RoT authentication service;
- validate the provisioning request and the token;
- and
- when the provisioning request and token are validated, send provisioning information to the IoT device.
6 more elements
Dependencies are inferred from the claim text.