System, Apparatus and Method for Managing Lifecycle of Secure Publish-Subscribe System

At least one computer readable storage medium comprising instructions that when executed enable a first device to:

• request enrollment of the first device with an identity provider, the enrollment including a role for the first device for a publish-subscribe protocol of a distributed network;
• receive a first device identity credential, from the identity provider and corresponding to the role, and store the first device identity credential in a memory of the first device;
• send a first request, for a first security ticket, to a key manager, wherein the first request includes:
• (a)(i) the first device identity credential, and (a)(ii) a first filter element associated with the a publish-subscribe protocol;
• and
• receive the first security ticket, which is restricted to the first filter element and includes a first key, from the key manager.

An apparatus comprising:

• at least one memory;
• and
• at least one processor, coupled to the memory, to perform operations comprising:
• request at least one enrollment with at least on identity provider, the enrollment including at least one role for the apparatus for a publish-subscribe protocol of a distributed network;
• receive at least one first identity credential, from the at least one identity provider and corresponding to the at least on role, and store the at least one first device identity credential in the at least one memory;
• send at least one first request, for at least one first security ticket, to at least one key manager, wherein the at least one first request includes:
• (a)(i) the at least one first identity credential, and (a)(ii) at least one first filter element associated with the a publish-subscribe protocol;
• and
• receive the at least one first security ticket, restricted to the at least one first filter element and including at least one first key, from the at least one key manager.