US 11,960,591 B2Granted

Provisioning and integrating devices

AssigneeMicrosoft Technology Licensing, LLC

InventorsRahul Mittal, Koji Kato, Prasad Gholve

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method and system for provisioning a first computing device and authenticating the provisioned first computing device are disclosed, comprising sending a request to prepare the first computing device, including providing a request identifier and an authentication token to be stored on the provisioned first computing device, receiving a unique identifier of the provisioned first computing device, storing the request identifier, the authentication token, and the received unique identifier in a provisioning data structure, and authenticating the provisioned first computing device on the network based on a determination that a unique identifier and the authentication token stored on the provisioned first computing device requesting authentication match both the authentication token and the received unique identifier of the provisioned first computing device in the provisioning data structure.

Claims20

Dependent claims

A computer system for provisioning a first computing device, comprising:

one or more processors;
and
a memory storing computer-executable instructions that, when executed, cause the one or more processors to perform operations of:
receiving, through the computer system, a request to provision the first computing device, the request associated with a request identifier;
sending a request to a second computing device separate from the computer system to prepare the first computing device, wherein sending the request includes providing the request identifier and an authentication token to be stored on the provisioned first computing device;
receiving, from the second computing device, by the computer system, a unique identifier of the provisioned first computing device associated with the request identifier;
storing the request identifier, the authentication token, and the received unique identifier of the provisioned first computing device in a provisioning data structure accessible by the computer system;
receiving, by the computer system, an authentication request for the provisioned first computing device on a network, the authentication request including the unique identifier of the provisioned first computing device and the authentication token stored on the provisioned first computing device;
identifying, by the computer system, the provisioning data structure based upon the unique identifier or the authentication token from the received authentication request;
authenticating, by the computer system, the provisioned first computing device on the network based on a determination that both the unique identifier of the provisioned first computing device and the authentication token stored on the provisioned first computing device match both the authentication token and the received unique identifier of the provisioned first computing device in the provisioning data structure;
and
authorizing access, to the provisioned first computing device, to a controlled resource based on the authenticating.

9 more elements

A computer-implemented method for provisioning a first computing device, the method comprising:

receiving, through a computer system, a request to provision the first computing device, the request associated with a request identifier;
sending a request to a second computing device separate from the computer system to prepare the first computing device, wherein sending the request includes providing the request identifier and an authentication token to be stored on the provisioned first computing device;
receiving, from the second computing device, by the computer system, a unique identifier of the provisioned first computing device associated with the request identifier;
storing the request identifier, the authentication token, and the received unique identifier of the provisioned first computing device in a provisioning data structure accessible by the computer system;
receiving, by the computer system, an authentication request for the provisioned first computing device on a network, the authentication request including the unique identifier of the provisioned first computing device and the authentication token stored on the provisioned first computing device;
identifying, by the computer system, the provisioning data structure based upon the unique identifier or the authentication token from the received authentication request;
authenticating, by the computer system, the provisioned first computing device on the network based on a determination that both the unique identifier of the provisioned first computing device and the authentication token stored on the provisioned first computing device match both the authentication token and the received unique identifier of the provisioned first computing device in the provisioning data structure;
and
authorizing access, to the provisioned first computing device, to a controlled resource based on the authenticating.

6 more elements

A system for provisioning a first computing device, the system comprising:

means for receiving, at a computer system, a request to provision the first computing device, the request associated with a request identifier;
means for sending a request to a second computing device separate from the computer system to prepare the first computing device, wherein sending the request includes providing the request identifier and an authentication token to be stored on the provisioned first computing device;
means for receiving, from the second computing device, a unique identifier of the provisioned first computing device associated with the request identifier;
means for storing the request identifier, the authentication token, and the received unique identifier of the provisioned first computing device in a provisioning data structure accessible by the computer system;
means for receiving, by the computer system, an authentication request for the provisioned first computing device on a network, the authentication request including the unique identifier of the provisioned first computing device and the authentication token stored on the provisioned first computing device;
means for identifying the provisioning data structure based upon the unique identifier or the authentication token from the received authentication request;
means for authenticating, by the computer system, the provisioned first computing device on the network based on a determination that both the unique identifier of the provisioned first computing device and the authentication token stored on the provisioned first computing device match both the authentication token and the received unique identifier of the provisioned first computing device in the provisioning data structure;
and
means for authorizing access, to the provisioned first computing device, to a controlled resource based on the authenticating.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/117,727Filed 6 Mar 2023 · continuation
Priority: 7 Jul 2021
Published: US 2023/0008333 A129 Jun 2023
Granted: 16 Apr 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
G06F 21/34
User authentication: involving the use of external additional devices, e.g. dongles or smart cards
G06F 21/45
Authentication, i.e. establishing the identity or authorisation of security principals: structures or tools for the administration of authentication

Family

Application17/369,215Parent of this continuation · filed 7 Jul 2021
US 2023/0205865 A1Pre-grant publication · published 29 Jun 2023
US 11,625,475 B2Parent of this continuation
US 2023/0008333 A1Published application
US 11,960,591 B2This patent

From the US filing history. Foreign family members aren’t listed.