Secure node management using selective authorization attestation

Abstract

A method of authorizing a gateway device to communicate with a registration server on behalf of an end node device is presented. The method entails a server at the cloud receiving a registration request from the gateway device, generating a bootstrapping authorization blob (BAB) in response to the registration request, and transmitting the BAB to the gateway device. The BAB defines functions that the gateway device is authorized to perform, and may be a flag vector containing a list of flags, each of the flags indicating authorization for a specific function. The method presented herein provides a secure and reliable way for end node devices 40 to communicate with the cloud without the elaborate interfaces required by conventional standards such as LWM2M.

Dependencies are inferred from the claim text.