Method and system for protection and security of IO devices using credentials

A computer-implemented method for protecting access and operation of at least one IO device, said method comprising:

• translating to set of a capability tokens for a consumer or for a group of consumers an IO capability allocation of an IO request and additional parameters included in said IO request, said IO request is initiated by a consumer or a group of consumer;
• generating a global key to protect said capability;
• based on said global key, issuing a cryptographically signed credential of said capability of said consumer or of a group of consumers;
• and controlling management rights of said IO device based on said credential.

A computer software product, including a computer-readable medium in which computer program instructions are stored, which instructions, when read by a computer, cause the computer to perform a method for protecting access and operation of at least one IO device, said method comprising:

• translating to a set of capability tokens for a consumer or for a group of consumers an IO capability allocation of an IO request and additional parameters included in said IO request, said IO request is initiated by a consumer or a group of consumer;
• generating a global key to protect said capability;
• based on said global key, issuing a cryptographically signed credential of said capability of said consumer or of a group of consumers;
• and
• controlling management rights of said IO device based on said credential.