# US 12,192,068 B2 · Access control for network services > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,068 B2 - Document ID: US12192068B2 - Status: Granted - Kind: B2 - Application number: 18/228,919 - Filed: 2023-08-01 - Published: 2024-02-29 - Granted: 2025-01-07 - Earliest claimed: 2022-08-24 - Assignees: Uab 360 It - Applicants: Uab 360 It - Inventors: Dovydas Bespalovas; Mindaugas Valkaitis - Web page: https://patentgrep.com/patent/US12192068B2 ## CPC - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04L 9/0822: {using key encryption key} - H04L 9/3247: {involving digital signatures} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/102: {Entity profiles} - H04L 67/146: Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method including receiving, by a manager device from an infrastructure device, an invitation link to enable the manager device to manage network services provided by the infrastructure device; receiving, by the manager device from the infrastructure device based on the manager device activating the invitation link, seed information including unique information associated with manager device to enable the manager device to determine authorization information; determining, by the manager device, the authorization information based on utilizing the unique information; transmitting, by the manager device to the infrastructure device, a manager request related to an action to be performed regarding the network services, the manager request being signed based on utilizing a portion of the authorization information; and performing, by the manager device based on authorization of the manager request by the infrastructure device, the action regarding the network services is disclosed. Various other aspects are contemplated. ## Claims ### Claim 1 A method, comprising: receiving, by a manager device from an infrastructure device, an invitation link to enable the manager device to manage network services provided by the infrastructure device; receiving, by the manager device from the infrastructure device based at least in part on the manager device activating the invitation link, seed information including unique information associated with manager device to enable the manager device to determine authorization information; determining, by the manager device, the authorization information based at least in part on utilizing the unique information; transmitting, by the manager device to the infrastructure device, a manager request related to an action to be performed regarding the network services, the manager request being signed based at least in part on utilizing a portion of the authorization information; and performing, by the manager device based at least in part on authorization of the manager request by the infrastructure device, the action regarding the network services. ### Claim 2 (depends on 1) The method of claim 1, wherein the manager request may include information indicating a point in time when the manager request was created to enable the infrastructure device to authorize the manager request. ### Claim 3 (depends on 1) The method of claim 1, wherein the manager request may include information indicating a point in time when the manager request was signed to enable the infrastructure device to authorize the manager request. ### Claim 4 (depends on 1) The method of claim 1, wherein the invitation link includes a static portion and a dynamic portion. ### Claim 5 (depends on 1) The method of claim 1, wherein the invitation link includes a static portion and a dynamic portion, the dynamic portion identifying a point in time before which the invitation link is to be activated by the manager device. ### Claim 6 (depends on 1) The method of claim 1, wherein the invitation link includes a static portion and a dynamic portion, the dynamic portion including a unique identifier that identifies the manager device. ### Claim 7 (depends on 1) The method of claim 1, wherein determining the authorization information includes determining a master string of alphanumeric characters, and a master key based at least in part on the master string of alphanumeric characters. ### Claim 8 A manager device, comprising: a memory; and a processor communicatively coupled to the memory, the memory and the processor being configured to: receive, from an infrastructure device, an invitation link to enable the manager device to manage network services provided by the infrastructure device; receive, from the infrastructure device based at least in part on the manager device activating the invitation link, seed information including unique information associated with manager device to enable the manager device to determine authorization information; determine the authorization information based at least in part on utilizing the unique information; transmit, to the infrastructure device, a manager request related to an action to be performed regarding the network services, the manager request being signed based at least in part on utilizing a portion of the authorization information; and perform, by the manager device based at least in part on authorization of the manager request by the infrastructure device, the action regarding the network services. ### Claim 9 (depends on 8) The manager device of claim 8, wherein the manager request may include information indicating a point in time when the manager request was created to enable the infrastructure device to authorize the manager request. ### Claim 10 (depends on 8) The manager device of claim 8, wherein the manager request may include information indicating a point in time when the manager request was signed to enable the infrastructure device to authorize the manager request. ### Claim 11 (depends on 8) The manager device of claim 8, wherein the invitation link includes a static portion and a dynamic portion. ### Claim 12 (depends on 8) The manager device of claim 8, wherein the invitation link includes a static portion and a dynamic portion, the dynamic portion identifying a point in time before which the invitation link is to be activated by the manager device. ### Claim 13 (depends on 8) The manager device of claim 8, wherein the invitation link includes a static portion and a dynamic portion, the dynamic portion including a unique identifier that identifies the manager device. ### Claim 14 (depends on 8) The manager device of claim 8, wherein, to determine the authorization information, the memory and the processor are configured to determine a master string of alphanumeric characters, and a master key based at least in part on the master string of alphanumeric characters. ### Claim 15 A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with a manager device, configure the processor to: receive, from an infrastructure device, an invitation link to enable the manager device to manage network services provided by the infrastructure device; receive, from the infrastructure device based at least in part on the manager device activating the invitation link, seed information including unique information associated with manager device to enable the manager device to determine authorization information; determine the authorization information based at least in part on utilizing the unique information; transmit, to the infrastructure device, a manager request related to an action to be performed regarding the network services, the manager request being signed based at least in part on utilizing a portion of the authorization information; and perform, by the manager device based at least in part on authorization of the manager request by the infrastructure device, the action regarding the network services. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the manager request may include information indicating a point in time when the manager request was created to enable the infrastructure device to authorize the manager request. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the manager request may include information indicating a point in time when the manager request was signed to enable the infrastructure device to authorize the manager request. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the invitation link includes a static portion and a dynamic portion. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the invitation link includes a static portion and a dynamic portion, the dynamic portion identifying a point in time before which the invitation link is to be activated by the manager device. ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the invitation link includes a static portion and a dynamic portion, the dynamic portion including a unique identifier that identifies the manager device.