# US 2018/0026799 A1 · A method of establishing trust between a device and an apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0026799 A1 - Document ID: US20180026799A1 - Status: Published application - Kind: A1 - Application number: 15/549,505 - Filed: 2016-01-25 - Published: 2018-01-25 - Earliest claimed: 2015-02-09 - Assignees: ARM IP Limited; Arm Limited - Applicants: ARM IP Limited; Arm Limited - Inventors: Remy POTTIER; Amyas Edward Wykes PHILLIPS; Milosch MERIAC - Web page: https://patentgrep.com/patent/US20180026799A1 ## CPC - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/14: using a plurality of keys or algorithms - H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3247: {involving digital signatures} - H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model} - H04L 9/3271: {using challenge-response} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract There is disclosed a method of establishing trust between an agent device and a verification apparatus, the method comprising: obtaining, at the agent device, a trust credential, wherein the trust credential relates to an aspect of the agent device and comprises authentication information for identifying at least one party trusted by the verification apparatus and/or device data relating to the agent device; transmitting, from the agent device to the verification apparatus, the trust credential; obtaining, at the verification apparatus, the trust credential; analysing, at the verification apparatus, the trust credential; determining, at the verification apparatus, whether the agent device is trusted based on the analysis; and responsive to determining the agent device is trusted, establishing trust between the agent device and the verification apparatus. ## Claims ### Claim 1 A method of establishing trust between an agent device and a verification apparatus, the method comprising: obtaining, at the agent device, a trust credential, wherein the trust credential relates to an aspect of the agent device and comprises authentication information for identifying at least one party trusted by the verification apparatus and/or device data relating to the agent device; transmitting, from the agent device to the verification apparatus, the trust credential; obtaining, at the verification apparatus, the trust credential; analysing, at the verification apparatus, the trust credential; determining, at the verification apparatus, whether the agent device is trusted based on the analysis; and responsive to determining the agent device is trusted, establishing trust between the agent device and the verification apparatus. ### Claim 2 (depends on 1) A method according to claim 1, the method further comprising: obtaining, at the agent device, operational data; and transmitting from the agent device to the verification apparatus, the operational data; transmitting, from the verification apparatus to the agent device, a request for the trust credential in response to receiving the operational data. ### Claim 3 (canceled) ### Claim 4 (depends on 2) A method according to claim 2, the method comprising: processing, at the verification apparatus, the operational data when the device is trusted. ### Claim 5 (depends on 1) A method according to claim 1, wherein the trust credential comprises authentication information for identifying the agent device and wherein the trust credential comprises a chain of trust between the agent device and the at least one trusted party. ### Claim 6 (canceled) ### Claim 7 (depends on 54) A method according to claim 54, wherein analysing the trust credential comprises: identifying parties in the chain of trust. ### Claim 8 (depends on 7) A method according to claim 7, wherein determining whether the agent device is trusted comprises: identifying the at least one trusted party in the chain of trust. ### Claim 9 (depends on 1) A method according to claim 1, wherein the trust credential comprises one or more of a calibration credential, a maintenance credential, an inspection credential and/or an authenticity credential. ### Claim 10 (depends on 1) A method according to claim 1, wherein the device data comprises data relating to an operating parameter of the agent device, data relating to an operating state of the agent device and/or data relating to the precision of the agent device. ### Claim 11 (depends on 1) A method according to claim 1, wherein the authentication information comprises a cryptographic key or a cryptographic signature generated using a cryptographic key. ### Claim 12 (depends on 1) A method according to claim 1, the method further comprising: initiating, at the verification apparatus, a challenge-response procedure between the verification apparatus and the agent device; and establishing trust based on the challenge-response procedure. ### Claim 13 (depends on 1) A method according to claim 1, wherein transmitting the trust credential comprises transmitting the trust credential on receiving a request communication from the verification apparatus or wherein transmitting the trust credential comprises broadcasting the data from the agent device without receiving a request communication from the verification apparatus. ### Claim 14 (canceled) ### Claim 15 (depends on 1) A method according to claim 1, wherein the trust credential comprises one more digital certificates. ### Claim 16 A method of establishing trust between an agent device and a verification apparatus, the method comprising: obtaining, at the agent device, credential data, wherein the credential data comprises a location identifier of a remote resource; transmitting, from the agent device to the verification apparatus, the location identifier; obtaining, at the verification apparatus, the location identifier; transmitting, from the verification apparatus to the remote resource, a request for a trust credential, wherein the trust credential relates to an aspect of the agent device and comprises authentication information for identifying at least one party trusted by the verification apparatus and/or device data relating to the agent device; receiving, at the verification apparatus from the remote resource, the trust credential; analysing, at the verification apparatus, the trust credential; determining, at the verification apparatus, whether the agent device is trusted based on the analysis; and responsive to determining the agent device is trusted, establishing trust between the agent device and the verification apparatus. ### Claim 17 (depends on 16) A method according to claim 16, the method further comprising: transmitting, from the verification apparatus to the remote resource, a request for the trust credential associated with the agent device. ### Claim 18 (depends on 16) A method according to claim 16, wherein the credential data further comprises a time dependent identifier. ### Claim 19 A method of demonstrating trust to a verification apparatus by an agent device, the method comprising: obtaining, at the agent device, credential data, wherein the credential data comprises a trust credential which relates to an aspect of the agent device and comprises authentication information for identifying at least one party trusted by the verification apparatus and/or device data relating to the agent device, or wherein the credential data comprises a location identifier of a remote resource having access to a trust credential associated with the agent device; storing, at the agent device, the credential data; transmitting, from the agent device to the verification apparatus, the credential data. ### Claim 20 (depends on 19) A method according to claim 19, the method further comprising: obtaining, at the agent device, operational data; and transmitting from the agent device to the verification apparatus, the operational data. ### Claim 21 (depends on 20) A method according to claim 20, the method further comprising: receiving, at the agent device from the verification apparatus, a request to transmit the credential data; and transmitting, from the agent device to the verification apparatus, the credential data in response to the request. ### Claim 22 (depends on 19) A method according to claim 19, the method further comprising: receiving, at the agent device from the verification apparatus, a challenge communication as part of a challenge-response procedure; transmitting, from the agent device to the verification apparatus, a response communication as part of the challenge-response procedure, wherein the response communication comprises authentication information identifying the agent device and/or a time dependent identifier. ### Claim 23 (depends on 19) A method according to claim 19, wherein the trust credential comprises a calibration credential, a maintenance credential, an inspection credential and/or an authenticity credential. ### Claim at position 24 24-43. (canceled)