# US 2018/0324168 A1 · Registry apparatus, agent device, application providing apparatus and corresponding methods > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0324168 A1 - Document ID: US20180324168A1 - Status: Published application - Kind: A1 - Application number: 16/035,765 - Filed: 2018-07-16 - Published: 2018-11-08 - Earliest claimed: 2013-10-17 - Assignees: ARM IP Limited - Applicants: ARM IP Limited - Inventors: William Allen CURTIS; Douglas Miles ANSON; Kerry BALANZA - Web page: https://patentgrep.com/patent/US20180324168A1 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A registry apparatus is provided for maintaining a device registry of agent devices for communicating with application providing apparatus. The registry comprises authentication information for uniquely authenticating at least one trusted agent device. In response to an authentication request from an agent device, the authentication information for that device is obtained from the registry, and authentication of the agent device is performed. If the authentication is successful, then application key information is transmitted to at least one of the agent device and the application providing apparatus. ## Claims ### Claim 1 A method for a registry to establish secure communication between an agent device and an application providing apparatus, wherein the registry maintains a device registry comprising a device registry entry for the agent device, the device registry entry comprising a device identifier of the agent device associated with authentication information for uniquely authenticating the agent device and the registry comprising an application identifier for identifying the application providing apparatus; the method comprising steps of: (a) receiving, at the registry, from the agent device an authentication request specifying the device identifier of the agent device; (b) obtaining from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request; (c) performing authentication of the agent device using the authentication information obtained from the device registry; and (d) if the authentication is successful, transmitting to both the agent device and the application providing apparatus application key information for performing the secure communication between the agent device and the application providing apparatus. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: (e) prior to transmitting the application key information, receiving, at the registry, from the application providing apparatus with which the agent device is to perform the secure communication, an application association request, generated at the application providing apparatus, the application association request specifying that the application identifier of the application providing apparatus be associated with the device identifier of the agent device in the device registry; and (f) registering the application identifier in the device registry entry of the agent device having the device identifier specified by the application association request. ### Claim 3 (depends on 1) The method according to claim 1, wherein if the authentication is successful, the device identifier of the agent device is transmitted to the application providing apparatus. ### Claim 4 (depends on 1) The method according to claim 1, comprising a step of performing authentication between the registry and the application providing apparatus. ### Claim 5 (depends on 1) The method according to claim 1, wherein the application key information is transmitted to at least one application providing apparatus identified in the device registry entry as an application providing apparatus with which the agent device is to perform the secure communication. ### Claim 6 (depends on 1) The method according to claim 1, wherein the authentication information comprises key information for authenticating a message received from the agent device. ### Claim 7 (depends on 1) The method according to claim 1, wherein the authentication comprises mutual authentication between the agent device and the registry. ### Claim 8 A registry for establishing secure communication between an agent device and an application providing apparatus, the registry comprising: storage circuitry configured to store a device registry comprising a device registry entry for the agent device, the device registry entry comprising a device identifier of the agent device associated with authentication information for uniquely authenticating the agent device and the registry comprising an application identifier for identifying the application providing apparatus; communication circuitry configured to receive, at the registry, from the agent device an authentication request specifying the device identifier of the agent device; and processing circuitry configured to obtain from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request, and to perform authentication of the agent device using the authentication information obtained from the device registry; wherein if the authentication is successful, then the communication circuitry is configured to transmit to both the agent device and the application providing apparatus application key information for performing the secure communication between the agent device and the application providing apparatus. ### Claim 9 A method for an agent device to establish secure communication with an application providing apparatus using a registry for maintaining a device registry of agent devices, the device registry comprising a device registry entry for the agent device, the device registry entry comprising a device identifier of the agent device associated with authentication information for uniquely authenticating the agent device and an application identifier of the application providing apparatus, and wherein the agent device is configured to store the device identifier of the agent device and the authentication information for uniquely authenticating the agent device; the method comprising steps of: (a) transmitting to the registry, from the agent device, an authentication request specifying the device identifier of the agent device; (b) performing authentication with the registry using the authentication information stored by the agent device; and (c) if the authentication is successful, receiving application key information from the registry, and performing the secure communication with the application providing apparatus having the application identifier using the application key information. ### Claim 10 (depends on 9) The method according to claim 9, wherein the authentication request is transmitted to the registry automatically in response to activation of the agent device. ### Claim 11 (depends on 9) The method according to claim 9, wherein the authentication request is transmitted to the registry automatically without user interaction. ### Claim 12 (depends on 9) The method according to claim 9, wherein the authentication comprises mutual authentication between the registry and the agent device using the authentication information and registry authentication information for authenticating the registry. ### Claim 13 (depends on 9) The method according to claim 9, wherein the authentication information is stored in a protected region of the agent device. ### Claim 14 (depends on 9) The method according to claim 9, wherein the secure communication comprises direct communication between the agent device and the application providing apparatus without communication via the registry. ### Claim 15 (depends on 9) The method according to claim 9, wherein the secure communication comprises an encrypted communication encrypted using the application key information. ### Claim 16 (depends on 9) The method according to claim 9, wherein the agent device is configured to store a registry address identifying the registry, and to transmit the authentication request to the registry identified by the registry address.