Trusted Platform Module-Based Prepaid Access Token for Commercial IoT Online Services

An access system configured for use with an Internet of Things (IoT) device and a provisioning service operating on a remote server, comprising:

• performing, at the provisioning service, attestation on an endorsement key associated with a trusted platform module (TPM) on the IoT device, in which attestation at least verifies the IoT device's authorization to receive an access token;
• after attestation, generating, at the provisioning service, the access token unique to the TPM of the IoT;
• transmitting the generated access token from the provisioning service to the TPM of the IoT;
• and
• enabling an operation to be performed by the IoT device using the access token.

One or more non-transitory hardware-based computer-readable memory devices storing instructions which, when executed by one or more processors disposed in a remote server configured for operations as an authentication service, cause the remote server to:

• receive an identity associated with a trusted platform module (TPM) disposed in a computing device;
• attempt to authenticate the identity of the TPM in the computing device;
• upon successful authentication of the TPM identity, generate an authorization key usable in operations implemented by the TPM in the computing device;
• and
• create a policy for the generated authorization key, the policy including one or more rules to be satisfied by operations of the TPM in the computing device.