Gateway certificate management

A method comprising:

• detecting, at a gateway device comprising a processor, a connection comprising a local communication channel between the gateway device and a user device, wherein the gateway device is located at a premises and wherein the user device is located at the premises, and wherein the connection is created to request communications between the user device and a resource that is not located at the premises;
• determining, by the gateway device and based on analyzing a profile for the user device and a context associated with the communications, if a certificate that is used to establish a secure communication channel should be generated by the gateway device for the communications requested via the connection, wherein the profile for the user device comprises configurations, settings, and limits defined for the user device, and wherein the context comprises information identifying a type of data to be communicated via the communications;
• in response to determining that the certificate should be issued for the communications, generating, by the gateway device, the certificate, wherein the certificate comprises custom certificate data comprising communication context data that defines the type of data, and wherein the certificate authorizes the user device to send and receive the type of data;
• and
• providing, by the gateway device and to the user device and to the resource, the certificate to enable the communications via the secure communication channel, whereby the user device is allowed to communicate with the resource via the gateway device to send and receive the type of data, wherein the gateway device provides a first copy of the certificate to the user device via the local communication channel, wherein the gateway device provides a second copy of the certificate to the resource via the secure communication channel, wherein the gateway device maintains a copy of the certificate, and wherein the gateway device is configured to revoke the certificate to teardown the local communication channel and to terminate the communications.

A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:

• detecting, at a gateway device, a connection comprising a local communication channel between the gateway device and a user device, wherein the gateway device is located at a premises and wherein the user device is located at the premises, and wherein the connection is created to request communications between the user device and a resource that is not located at the premises;
• determining, based on analyzing a profile for the user device and a context associated with the communications, if a certificate that is used to establish a secure communication channel should be generated by the gateway device for the communications requested via the connection, wherein the profile for the user device comprises configurations, settings, and limits defined for the user device, and wherein the context comprises information identifying a type of data to be communicated via the communications;
• in response to determining that the certificate should be issued for the communications, generating the certificate, wherein the certificate comprises custom certificate data comprising communication context data that defines the type of data, and wherein the certificate authorizes the user device to send and receive the type of data;
• and
• providing, to the user device and to the resource, the certificate to enable the communications via the secure communication channel, whereby the user device is allowed to communicate with the resource via the gateway device to send and receive the type of data, wherein the gateway device provides a first copy of the certificate to the user device via the local communication channel, wherein the gateway device provides a second copy of the certificate to the resource via the secure communication channel, wherein the gateway device maintains a copy of the certificate, and wherein the gateway device is configured to revoke the certificate to teardown the local communication channel and to terminate the communications.