Group management in reconfigurable machine-to-machine systems
AssigneeIntel Corporation
InventorsShao-Wen Yang, Meiyuan Zhao
Life of this patent
Estimating the term…
Abstract
A registrar device is delegated enrollment authority for a group by a group authority. The registrar device identifies a particular asset device in association with a reconfiguration of a machine-to-machine (M2M) system that includes the group. The registrar device identifies an enrollment request for enrollment of the particular asset device within the group of devices in association with the reconfiguration of the M2M system and communicates with the particular device to initiate enrollment of the particular device within the group of devices, where enrollment of the particular device includes provisioning the particular device with a group access credential.
Claims20
An apparatus comprising:
- a memory to store an authorizing credential;
- and
- a registrar comprising logic executable to:
- identify a particular asset device in association with a reconfiguration of a machine-to-machine (M2M) system, wherein the M2M system comprises a plurality of asset devices and a defined group comprising at least a portion of the plurality of asset devices, a group authority device is designated as a group authority for the group, and the authorizing credential corresponds to a trust relationship with the group authority device;
- receive an enrollment request for enrollment of the particular asset device within the group of devices in association with the reconfiguration of the M2M system;
- and
- communicate with the particular device to initiate enrollment of the particular device within the group of devices, wherein enrollment of the particular device comprises provisioning the particular device with a group access credential.
A method comprising:
- maintaining an authorizing credential corresponding to a trust relationship with a group authority device, wherein the group authority device is designated as a group authority for a particular group within a machine-to-machine (M2M) system comprising a plurality of asset devices, and the group comprises at least a subset of the plurality of asset devices;
- identifying a particular asset device in association with a reconfiguration of the M2M system, wherein reconfiguration of the M2M system comprises an addition of the particular asset device to the M2M system;
- receiving an enrollment request for enrollment of the particular asset device within the group in association with the reconfiguration of the M2M system;
- and
- communicating with the particular asset device to enroll the particular asset device within the group of devices, wherein enrollment of the particular asset device comprises provisioning the particular asset device with a group access key.
A system comprising:
- a group authority device designated as a group authority for a particular group within a machine-to-machine (M2M) system comprising a plurality of asset devices, and the group comprises at least a subset of the plurality of asset devices;
- and
- a registrar device, to which enrollment authority is delegated by the group authority based on an authorizing key provisioned on the registrar device through communication with the group authority device, wherein the registrar device is to:
- identify a reconfiguration event affecting the M2M system;
- detect a particular asset device on a network, wherein the particular asset device is to be added to the M2M system in association with the reconfiguration event;
- receive an enrollment request for enrollment of the particular asset device in the group in association with the reconfiguration of the M2M system;
- participate in a trust-establishment procedure with the particular asset device to generate a limited-use credential for the particular asset;
- and
- facilitate communication of the limited-use credential from the particular asset device to the group authority device to assist in enrollment of the particular asset device in the group.
Dependencies are inferred from the claim text.