Loading patent…
AssigneeConvida Wireless, LLC
InventorsVinod Kumar CHOYI, Chonggang WANG, Dale N. SEED
Estimating the term…
Described herein are complete lifecycle management processes for IoT/M2M devices, which are commissioned and de-commissioned in a given system without requiring a user/human administrator. A delegated life-cycle management process is described, wherein devices rely upon a delegatee, which may have more computing and battery resources than the devices. Further, a Trust Enabling Infrastructure (TEI) is described herein, which may belong to a different trusted domain than the given device and its delegatee. A device in response to powering on for the first time, registers with a trust enabling infrastructure (TEI) and generates one or more credentials based on the registration with the TEI so as to define a trust relationship with the TEL After the registration, the device receives one or more security components and policies from the TEI and installs the one or more security components so as to define a secure environment.
An apparatus comprising a processor, a memory, and communication circuitry, the apparatus being connected to a network via its communication circuitry, the apparatus further comprising computer-executable instructions stored in the memory of the apparatus which, when executed by the processor of the apparatus, cause the apparatus to perform operations comprising:
The apparatus as recited in any one of the preceding claims, wherein a URL of the TEI, an IP address of the TEI, or an endpoint address of the TEI is preprovisioned on the apparatus.
The apparatus as recited in any one of the preceding claims, wherein the one or more credentials include a symmetric key shared between the apparatus and the TEI, so as to define a master key that can be bootstrapped for authenticating with a third entity.
The apparatus as recited in any one of the preceding claims, wherein the computer-executable instructions cause the apparatus to perform further operations comprising:
The apparatus as recited in any one of the preceding claims, wherein the one or more credentials comprise at least one of:
The apparatus as recited in any one of the preceding claims, wherein the policies from the TEI stipulate at least one of:
The apparatus as recited in any one of the preceding claims, wherein the TEI is associated with a manufacturer of the apparatus.
The apparatus as recited in any one of the preceding claims, wherein the apparatus comprises a user equipment, a sensor, an actuator, a gateway, or a virtual network function.
An apparatus comprising a processor, a memory, and communication circuitry, the apparatus being connected to a network via its communication circuitry, the apparatus further comprising computer-executable instructions stored in the memory of the apparatus which, when executed by the processor of the apparatus, cause the apparatus to perform operations comprising:
A method comprising
Dependencies are inferred from the claim text.