Identification and authentication of multiple controllers
AssigneeThirdwayv, Inc.
InventorsMICHAEL ATEF AYOUB, Nabil Wasily
Life of this patent
Estimating the term…
Abstract
Systems, methods, and devices for identifying and authenticating devices include a plurality of controllers and an embedded device. A first controller may grant or deny access of other controllers to the embedded device without a centralized intermediary such as a remote network resource. In this manner, different device control privileges may be set for different devices in the absence of a constant network connection among the devices or between the collection of devices and a network-connected resource such as an authentication server.
Claims20
An identification and authentication system comprising:
- a plurality of controllers including a first controller having a first device certificate and a second controller having a second device certificate, the first device certificate having a first user identifier and a first set of device control privileges and the second device certificate having a second user identifier and a second set of device control privileges;
- and
- an embedded device including:
- an embedded device memory;
- and
- an embedded device processor configured to:
- obtain, from the first controller, the first device certificate,
- obtain, from the second controller, the second device certificate,
- determine whether the second user identifier within the second device certificate is the same as the first user identifier within the first device certificate, and
- allow or prevent access to the embedded device by the second controller based on the determination.
An identification and authentication system, comprising:
- an embedded device having an embedded device processor;
- and
- a plurality of controllers including a primary controller and a secondary controller, the primary controller including:
- a first memory configured to store a root certificate that includes a first set of device control privileges;
- and
- a first processor coupled to the first memory and configured to:
- determine that the first set of device control privileges allow the primary controller to generate a device certificate for the secondary controller,
- generate the device certificate with a second set of device control privileges,
- assign the device certificate to the secondary controller,
- issue or send the device certificate to the secondary controller, and
- send a public key of the root certificate to the embedded device to verify the device certificate.
An identification and authentication system comprising:
- a plurality of controllers including a first controller and a second controller;
- and
- an embedded device including:
- an embedded device memory configured to store a first long-term shared secret;
- and
- an embedded device processor configured to:
- derive a second long-term shared secret using the first long-term shared secret,
- obtain a third long-term shared secret from the second controller, and
- authenticate the second controller when the second long-term shared secret matches the third long-term shared secret.
Dependencies are inferred from the claim text.