Secure provisioning of computing devices for enterprise connectivity
AssigneeIntel Corporation
InventorsKhaled I. Almahallawy, Yasser Rasheed, Hormuzd M. Khosravi
Life of this patent
Estimating the term…
Abstract
Technologies for securely provisioning a personal computing device for enterprise connectivity includes a trusted computing device for wirelessly communicating with the personal computing device, generating a key pair for the personal computing device, generating a certificate signing request, sending the certificate signing request on behalf of the personal computing device, receiving an access certificate for enterprise connectivity, and securely exporting the access certificate and a private key of the key pair to the personal computing device.
Claims25
One or more machine readable media comprising a plurality of instructions stored thereon that in response to being executed result in a trusted computing device:
- establishing a communication channel with a personal computing device, the trusted computing device having previously been provisioned for enterprise connectivity;
- generating a key pair on behalf of the personal computing device, the key pair comprising a public key and a private key;
- generating a certificate signing request on behalf of the personal computing device, the certificate signing request comprising the public key of the key pair generated on behalf of the personal computing device;
- sending the certificate signing request on behalf of the personal computing device;
- receiving an access certificate for accessing enterprise resources on behalf of the personal computing device;
- and
- securely exporting the access certificate to the personal computing device.
A trusted computing device for securely provisioning a personal computing device for enterprise connectivity, the trusted computing device having previously been provisioned for enterprise connectivity and comprising:
- a communication module to establish a communication channel with the personal computing device;
- and
- a security module to (i) generate a key pair on behalf of the personal computing device, (ii) generate a certificate signing request on behalf of the personal computing device, (iii) send the certificate signing request on behalf of the personal computing device, (iv) receive an access certificate for accessing enterprise resources on behalf of the personal computing device, and (v) securely export the access certificate to the personal computing device.
A method for securely provisioning a personal computing device for enterprise connectivity, the method comprising:
- establishing, on a trusted computing device, a communication channel with the personal computing device, the trusted computing device having previously been provisioned for enterprise connectivity;
- generating, on the trusted computing device, a key pair on behalf of the personal computing device;
- generating, on the trusted computing device, a certificate signing request on behalf of the personal computing device;
- sending, on the trusted computing device, the certificate signing request on behalf of the personal computing device;
- receiving, on the trusted computing device, an access certificate for accessing enterprise resources on behalf of the personal computing device;
- and
- securely exporting, on the trusted computing device, the access certificate to the personal computing device.
A certificate server for securely provisioning a personal computing device for enterprise connectivity, the certificate server comprising:
- a communication module to (i) receive a certificate signing request sent over a network on behalf of the personal computing device, and (ii) send an access certificate for accessing enterprise resources by the personal computing device;
- and
- a certificate provisioning module to (i) verify that the personal computing device is registered, (ii) verify that a user of the personal computing device is authorized to provision the personal computing device for enterprise connectivity, and (iii) generate the access certificate for accessing enterprise resources by the personal computing device.
Dependencies are inferred from the claim text.