Late-bound licensing of endpoint devices
AssigneeDell Products L.P.
InventorsBradley K. Goodman, Mahesh Babu Ramaiah
Life of this patent
Estimating the term…
Abstract
Methods and systems for managing endpoint devices are disclosed. The endpoint devices may be managed by onboarding them. To onboard the endpoint devices, ownership vouchers may be used to cryptographically verify to which entities authority over the endpoint devices have been delegated. The ownership vouchers may also include licenses to be applied by the endpoint devices during the onboarding. The licenses may be applied during the onboarding with zero intervention by a current owner of the endpoint devices.
Claims20
A method for managing endpoint devices, the method comprising:
- during an onboarding of an endpoint device of the endpoint devices:
- obtaining, by the endpoint device, an ownership voucher, the ownership voucher comprising a certificate that includes a license payload with a component license associated with a component of the endpoint device;
- validating, by the endpoint device and using the ownership voucher, that the component license is signed by a trusted entity associated with the endpoint device that delegated an ownership of the endpoint device to a current owner of the endpoint device;
- and
- applying, by the endpoint device and in response to validating that the component license is signed by the trusted entity, the component license for utilizing the component as part of completing the onboarding of the endpoint device, wherein applying the component license to the component comprises using, by the endpoint device and without any intervention by the current owner, the component license to activate one or more functions of the component.
A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing endpoint devices, the operations comprising:
- during an onboarding of an endpoint device of the endpoint devices:
- obtaining, by the endpoint device, an ownership voucher, the ownership voucher comprising a certificate that comprises a license payload including a component license associated with a component of the endpoint device;
- validating, by the endpoint device and using the ownership voucher, that the component license is signed by a trusted entity associated with the endpoint device that delegated an ownership of the endpoint device to a current owner of the endpoint device;
- and
- applying, by the endpoint device and in response to validating that the component license is signed by the trusted entity, the component license to the component as part of completing the onboarding of the endpoint device,
- wherein applying the component license to the component comprises using, by the endpoint device and without any intervention by the current owner, the component license to activate one or more functions of the component.
An endpoint device, comprising:
- a processor;
- and
- a memory coupled to the processor to store instructions, which when executed by the processor, cause the endpoint device to perform operations for onboarding, the operations comprising:
- during an onboarding of the endpoint device:
- obtaining an ownership voucher, the ownership voucher comprising a certificate that comprises a license payload including a component license associated with a component of the endpoint device;
- validating, using the ownership voucher, that the component license is signed by a trusted entity associated with the endpoint device that delegated an ownership of the endpoint device to a current owner of the endpoint device;
- and
- applying, in response to validating that the component license is signed by the trusted entity, the component license to the component as part of completing the onboarding of the endpoint device,
- wherein applying the component license to the component comprises using, by the endpoint device and without any intervention by the current owner, the component license to activate one or more functions of the component.
Dependencies are inferred from the claim text.