End-To-End Service Layer Authentication
AssigneeConvida Wireless, LLC
InventorsVinod Kumar Choyi, Dale N. Seed, Catalina M. Mladin, Chonggang Wang
Life of this patent
Estimating the term…
Abstract
A variety of mechanisms to perform End-to-End authentication between entities having diverse capabilities (E.g. processing, memory, etc.) and with no prior security associations are used. Security provisioning and configuration process is done such that appropriate security credentials, functions, scope and parameters may be provisioned to an Entity. Mechanisms to distribute the security credentials to other entities which could then use the credentials to perform an End-to-End authentication at the Service Layer or the Session Layer and using Direct or Delegated modes are developed.
Claims20
A method for use by an entity connected to a network, wherein the entity comprises a processor and memory, and wherein the entity further includes computer-executable instructions stored in the memory which, when executed by the entity, perform the method comprising:
- obtaining security credentials from a trusted location for a connection to a second entity, the second entity being multiple service layer hops from the entity;
- and
- using the security credentials to make a connection between the first and second entity.
An entity comprising a processor, a memory, and communication circuitry, the entity being connected to a communications network via its communication circuitry, the entity further including computer-executable instructions stored in the memory of the entity which, when executed by the processor of the entity, cause the entity to:
- obtain security credentials from a trusted location for a connection to a second entity, the second entity being multiple service layer hops from the entity;
- and
- use the security credentials to make a connection between the first and second entity.
A method for use by a trusted entity connected to a network, wherein the trusted entity comprises a processor and memory, and wherein the trusted entity further includes computer-executable instructions stored in the memory which, when executed by the trusted entity, perform the method comprising:
- sending first security credentials to a first entity;
- and
- sending second security credentials to a second entity, wherein the second entity is multiple service layer hops from the first entity, wherein the first and second security credentials are used to make a connection between the first and second entity.
A method for use by an entity connected to a network, wherein the entity comprises a processor and memory, and wherein the entity further includes computer-executable instructions stored in the memory which, when executed by the entity, perform the method comprising:
- receiving at a least one of a security profile, a device profile and an entity profile;
- and
- using the at a least one of a security profile, the device profile and the entity profile to select the security requirements for a multi-hop service layer connection.
Dependencies are inferred from the claim text.