Role based access control for connected consumer devices
AssigneeAyla Networks, Inc.
InventorsSudha Sundaresan, Adrian Caceres, Matias Blanch
Life of this patent
Estimating the term…
Abstract
A processing device authenticates a computing device of a user to a user account. The processing device determines a role associated with the user account, and additionally determines access permissions to one or more resources based on the role. The processing device then grants to the computing device access to the one or more resources to be protected in an internet of things (IoT) solution.
Claims21
A method comprising:
- authenticating, by a processing device, a user to a user account;
- determining, by the processing device, a role associated with the user account;
- determining access permissions to one or more resources based on the role, the one or more resources comprising one or more network-connected devices;
- and
- granting to the user access to the one or more resources based on the determined access permissions.
A computer readable storage medium having instructions that, when executed by a processing device, cause the processing device to perform operations comprising:
- authenticating, by the processing device, a computing device of a user to a user account;
- determining, by the processing device, a role associated with the user account;
- determining access permissions to one or more resources based on the role, the one or more resources comprising one or more network-connected devices;
- and
- granting to the computing device access to the one or more resources based on the determined access permissions.
A computing device comprising:
- at least one data store to store first data regarding a plurality of user accounts, second data regarding a plurality of resources and third data regarding a plurality of roles, wherein the plurality of resources comprise a plurality of network-connected devices, wherein each of the plurality of roles has access privileges to a unique subset of the plurality of resources, and wherein each of the plurality of user accounts is associated with one of the plurality of roles;
- and
- a processing device, connected with the at least one data store, to:
- authenticate a computing device of a user to a user account of the plurality of user accounts;
- determine a role of the plurality of roles that is associated with the user account;
- and
- transmit a token to the computing device, wherein the computing device is to provide the token to one or more services to notify the one or more services of the role associated with the user account and to cause the one or more services to grant to the computing device access to one or more resources of the plurality of resources associated with the role.
Dependencies are inferred from the claim text.