Custom authorization of network connected devices using signed credentials

A system at least partially implemented by hardware, comprising:

• one or more processors;
• and
• memory that stores computer-executable instructions that, as a result of execution by the one or more processors, cause the system to:
• receive a request with a token indicative of a registered network-addressable device of a customer, a digital signature associated with the token and signed by a private key of a public/private key pair, and an identifier registered by the customer in association with a public key and associated with an authorizing mechanism usable to perform an operation on the token, the token comprising at least a credential useable to authenticate the registered network-addressable device;
• determine the public key, of the public/private key pair, from a plurality of public keys, wherein the plurality of public keys are associated with a plurality of registered network-addressable devices;
• verify the digital signature based at least in part on the token and the pubic key;
• and
• as a result of successful verification of the digital signature, perform an authorization process to determine whether fulfillment of the request is authorized, the authorization routine including at least performing the operation on the token based, at least in part, on the authorizing mechanism associated with the identifier and performing a comparison process based on at least performing the operation on the token.

A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

• receive a request with a token indicative of a registered network-addressable device of a customer, a digital signature associated with the token and signed by a private key of a public/private key pair, and an identifier registered by the customer in association with a public key and associated with an authorizing mechanism usable to perform an operation on the token, the token comprising at least a credential useable to authenticate the registered network-addressable device;
• determine the public key, of the public/private key pair, from a plurality of public keys, wherein the plurality of public keys are associated with a plurality of registered network-addressable devices;
• verify the digital signature based at least in part on the token and the public key;
• and
• as a result of successful verification of the digital signature, perform an authorization process to determine whether fulfillment of the request is authorized, the authorization routine including at least performing the operation on the token based, at least in part, on the authorizing mechanism associated with the identifier and performing a comparison process based on at least performing the operation on the token.