Back to results
US 12,001,853 B2Granted
Device bootstrapping
AssigneeArm Limited
InventorsMarkku Lehto, Szymon Sasin
Life of this patent
Estimating the term…
Abstract
The present techniques generally relate to a computer implemented method of accessing a remote resource by an internet-connectable device, the method comprising: receiving, at the device from the bootstrap server, a first plurality of identifiers each identifier associated with a respective connectivity server; selecting, at the device, a first identifier from the first plurality of identifiers; authenticating with a first connectivity server associated with the selected first identifier.
Claims16
A computer implemented method of accessing a remote resource at a resource server by an internet-connectable device, the method performed at the device, comprising:
- establishing secure communications with a bootstrap server;
- performing a bootstrap process with the bootstrap server comprising:
- receiving, from the bootstrap server, a first plurality of identifiers each identifier associated with one of a respective first plurality of connectivity servers, each connectivity server located at a respective address on the internet with which the device can communicate;
- terminating communications with the bootstrap server when the bootstrap process is complete;
- determining based on or in response to a rule or policy provisioned thereon during a factory provisioning process, a first identifier to select from the first plurality of identifiers;
- selecting the first identifier from the first plurality of identifiers;
- establishing secure end-to-end secure communications with a first connectivity server associated with the selected first identifier;
- accessing the resource at the resource server via the first connectivity server, where the resource server is hosted on a private network accessible to the device only via the connectivity servers;
- when access to the resource server becomes unavailable via the first connectivity server:
- determining based on or in response to a rule or policy provisioned thereon during a factory provisioning process, a second identifier to select from the first plurality of identifiers;
- selecting the second identifier;
- establishing secure end-to-end secure communications with a second connectivity server associated with the selected second identifier;
- accessing the resource at the resource server via the second connectivity server,
- when access to all the connectivity servers of the first plurality of connectivity servers becomes unavailable:
- establishing secure communications with the bootstrap server to perform a further bootstrap process to obtain a second plurality of identifiers each identifier of the second plurality associated with one of a respective second plurality of connectivity servers.
12 more elements
An internet-connectable device to:
- establishing secure communications with a bootstrap server;
- performing a bootstrap process with the bootstrap server:
- receive from the bootstrap server in the bootstrap process, a first plurality of identifiers each identifier associated with a respective first plurality of connectivity servers, each connectivity server located at a respective address on the internet with which the device can communicate;
- terminate communications with the bootstrap server when the bootstrap process is complete;
- determine, based on or in response to a rule or policy provisioned thereon during a factory provisioning process, a first identifier to select from the first plurality of identifiers;
- select the first identifier;
- establish secure end-to-end secure communications with first connectivity server associated with the selected first identifier;
- access the resource at a resource server via the first connectivity server, where the resource server is hosted on a private network accessible to the device only via the connectivity servers;
- when access to the resource server becomes unavailable via the first connectivity server:
- determine based on or in response to a rule or policy provisioned thereon during the factory provisioning process, a second identifier to select from the first plurality of identifiers;
- select the second identifier;
- establish secure end-to-end secure communications with a second connectivity server associated with the selected second identifier;
- access the resource at the resource server via the second connectivity server;
- when access to all the connectivity servers of the first plurality of connectivity servers becomes unavailable:
- establish secure communications with the bootstrap server to perform a further bootstrap process to obtain a second plurality of identifiers each identifier of the second plurality associated with one of a respective second plurality of connectivity server.
12 more elements
A computer implemented method of bootstrapping an internet-connectable device by a bootstrap server, the method comprising:
- establishing secure communications with the device;
- performing a bootstrap process with the device:
- transmitting, from the bootstrap server to the device in the bootstrap process, credential data comprising a first plurality of identifiers, each identifier in the first plurality of identifiers associated with a respective connectivity server, each connectivity server located at a respective address on the internet with which the device can communicate,
- terminating communications with the device when the bootstrap process is complete, wherein the credential data is to:
- provide the device with the first plurality of identifiers from which the device, based on or in response to a rule or policy provisioned thereon during a factory provisioning process, determines a first identifier to select and establish secure end-to-end secure communications with a first connectivity server associated with the first identifier, to access a resource server via the first connectivity server, and when access to all the connectivity servers associated with the first plurality of connectivity servers becomes unavailable the bootstrap server is to:
- establish secure communications with the device to perform a further bootstrap process to provide a second plurality of identifiers each identifier of the second plurality associated with one of a respective second plurality of connectivity server via which the device can access the resource server.
3 more elements
Dependencies are inferred from the claim text.