# US 2016/0366157 A1 · System, apparatus and method for transferring ownership of a device from manufacturer to user using an embedded resource > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2016/0366157 A1 - Document ID: US20160366157A1 - Status: Published application - Kind: A1 - Application number: 14/865,198 - Filed: 2015-09-25 - Published: 2016-12-15 - Earliest claimed: 2015-06-09 - Assignees: Intel Corporation - Applicants: Intel Corporation - Inventors: Ned M. Smith; Nathan Heldt-Sheller; Sachin Agrawal; Mats G. Agerstam - Web page: https://patentgrep.com/patent/US20160366157A1 ## CPC - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 12/50: Secure pairing of devices - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract In one embodiment, a method includes receiving, in an on-boarding system for a first network, a request to transfer ownership of a first device having a trusted execution environment to a new owner; receiving, in the on-boarding system, notification information from a spectrum analyzer regarding wireless signal information within the first network; determining if a potential attacker is within a radio range of the first network based on the wireless signal information; responsive to determining that the potential attacker is within the radio range, manipulating a signal strength of the on-boarding system and the first device, to limit an emission range of the on-boarding system and the first device; and performing a native communication protocol between the on-boarding system and the first device to communicate ownership information to execute the ownership transfer to the new owner, and to cause the first device to store the ownership information in a storage of the first device. ## Claims ### Claim 1 A system comprising: a first device having at least one processor and a secure storage and having a first trusted execution environment (TEE); and an on-boarding system coupled to the first device within a first network, the on-boarding system including a second TEE, the on-boarding system to receive a request to transfer ownership of the first device to a new owner, receive notification information from a spectrum analyzer regarding wireless signal information within the first network, and perform a native communication protocol between the on-boarding system and the first device to communicate ownership information to execute the ownership transfer to the new owner, to cause the first device to store the ownership information in a storage of the first device. ### Claim 2 (depends on 1) The system of claim 1, wherein the on-boarding system is to receive a first token from a manufacturer of the first device and provide the first token to the first device. ### Claim 3 (depends on 2) The system of claim 2, wherein the first device comprises an Internet of Things (IoT) device and is to compare the first token to a stored token, and update an ownership indicator of the first device to indicate that the first device is owned, based at least in part on the comparison. ### Claim 4 (depends on 1) The system of claim 1, wherein the first device is to be introduced into the first network in an unowned state. ### Claim 5 (depends on 1) The system of claim 1, wherein the native communication protocol comprises a predetermined communication protocol to enable non-owner transfer communications. ### Claim 6 (depends on 1) The system of claim 1, wherein the native communication protocol comprises an in-band communication between the on-boarding system and the first device. ### Claim 7 (depends on 1) The system of claim 1, wherein the first device is to self-assert that it is to be owned by the new owner, without reliance on the on-boarding system. ### Claim 8 (depends on 1) The system of claim 1, wherein the native communication protocol includes establishment of a Diffie-Hellmann session between the on-boarding system and the first device, to establish an owner pre-shared key. ### Claim 9 (depends on 8) The system of claim 8, wherein the native communication protocol includes a secure session to be established using the owner pre-shared key. ### Claim 10 (depends on 8) The system of claim 8, wherein according to the native communication protocol, the on-boarding system is to: instruct the first device regarding a provisioning technique for the ownership transfer; calculate the owner pre-shared key and compare the calculated owner pre-shared key to a received pre-shared key, establish a secure provisioning channel between the on-boarding system and the first device using the owner pre-shared key; and provision the first device with one or more resources via the secure provisioning channel. ### Claim 11 (depends on 8) The system of claim 8, wherein the native communication protocol includes a shared PIN process to execute the ownership transfer. ### Claim 12 (depends on 9) The system of claim 9, wherein the first device is to self-assert ownership by the new owner during the secure session. ### Claim 13 (depends on 1) The system of claim 1, wherein the on-boarding system is to determine if a potential attacker is within a radio range of the first network based on the wireless signal information, and responsive to the determination that the potential attacker is within the radio range, manipulate a signal strength of the on-boarding system and the first device, to limit an emission range of the on-boarding system and the first device. ### Claim 14 At least one computer readable storage medium comprising instructions that when executed enable a system to: receive, in an on-boarding system for a first network, a request to transfer ownership of a first device having a trusted execution environment to a new owner; receive, in the on-boarding system, notification information from a spectrum analyzer regarding wireless signal information within the first network; determine if a potential attacker is within a radio range of the first network based on the wireless signal information; responsive to determining that the potential attacker is within the radio range, manipulate a signal strength of the on-boarding system and the first device, to limit an emission range of the on-boarding system and the first device; and perform a native communication protocol between the on-boarding system and the first device to communicate ownership information to execute the ownership transfer to the new owner, to enable the first device to store the ownership information in a storage of the first device. ### Claim 15 (depends on 14) The at least one computer readable storage medium of claim 14, further comprising instructions that when executed enable the system to: receive, in the on-boarding system, a first token via an out-of-band channel, from a manufacturer of the first device; and send the first token to the first device via a secure channel. ### Claim 16 (depends on 15) The at least one computer readable storage medium of claim 15, wherein responsive to receipt of the first token, the first device is to compare the first token to a stored token present in a secure storage of the first device, the stored token stored by the manufacturer of the first device, and update an owner status, based at least in part on the comparison. ### Claim 17 (depends on 14) The at least one computer readable storage medium of claim 14, further comprising instructions that when executed enable the system to prevent the ownership information communication responsive to the radio range determination. ### Claim 18 A method comprising: establishing a first secure session between an on-boarding system of an Internet of Things (IoT) network and a device to be introduced into the IoT network, the device in an unowned state at the introduction; computing an owner pre-shared key (PSK) in the device in the first secure session, storing the owner PSK in a storage of the device, and thereafter terminating the first secure session; establishing a second secure session between the on-boarding system and the device, using the owner PSK; and responsive to successfully establishing the second secure session, autonomously updating an ownership state of the device to an owned state. ### Claim 19 (depends on 18) The method of claim 18, further comprising: receiving a command from the on-boarding system to manipulate a signal strength of the device; and responsive to receiving the command, reducing a signal level of a wireless channel of the first secure session to limit an emission range of the device. ### Claim 20 (depends on 18) The method of claim 18, further comprising: receiving a first token from the on-boarding system, the first token received in the on-boarding system from a manufacturer of the device via an out-of-band channel; comparing the first token to a stored token stored in a secure storage of the device, the stored token stored by the manufacturer of the device; and updating the ownership state of the device, based at least in part on the comparison.