Back to results
US 2025/0061228 A1Published application
Associating decentralized identifiers with one or more devices
AssigneeMicrosoft Technology Licensing, LLC
InventorKim CAMERON
Life of this patent
Estimating the term…
Abstract
Generating and associating decentralized identifiers (DIDs) for a group of one or more related devices. First, a device group DID is generated. The device group DID is associated with a group of one or more related devices. For each of the group of one or more related devices, a device DID is generated, and associated with the corresponding device. A scope of permission is granted to the device group DID. In response to the granting the scope of permission to the device group DID, each device DID is granted a subset of the scope of permission.
Claims20
A method implemented in a computer system that includes a processor, for generating and associating a decentralized identifier (DID) for a group of one or more related devices, the method comprising:
- generating a device group DID for a group of devices by generating a private key of the device group DID based on a seed and a first hardware identifier of at least one device in the group of devices;
- associating the device group DID with the group of devices;
- for at least one corresponding device in the group of devices,
- deriving a device DID by generating a private key of the device DID based on a seed, a second hardware identifier of the corresponding device, and the device group DID;
- and
- associating the device DID with the corresponding device;
- granting a scope of permission to the device group DID, including granting a first permission to add new devices into the group of devices;
- in response to granting the scope of permission to the device group DID, granting the device DID a subset of the scope of permission, including granting the device DID the first permission to add new devices into the group of devices, as such the device group DID and the device DID is only linked to the device group DID or a corresponding device, and no personally identifiable information is directly associated with the device group DID or the device DID;
- receiving a request for adding a new device to the group of devices;
- verifying the new device with an existing device within the group of devices having the first permission;
- and
- adding the new device into the group of devices, including:
- deriving a new device DID;
- associating the new device DID with the new device;
- granting the new device DID the subset of the scope of permission;
- and
- recording a first transaction associated with granting the new device DID the subset of the scope of permission in a distributed ledger.
14 more elements
A computer system, comprising:
- a processor;
- and
- a computer-readable medium having thereon computer-executable instructions that are executable by the processor to at least:
- generate a device group decentralized identity (DID) for a group of devices by generating a private key of the device group DID based on a seed and a first hardware identifier of at least one device in the group of devices;
- associate the device group DID with the group of devices;
- for at least one corresponding device in the group of devices,
- derive, from the device group DID, a first device DID by generating a private key of the first device DID based on a seed, a second hardware identifier of the corresponding device, and the device group DID;
- and
- associate the first device DID with the corresponding device;
- grant a scope of permission to the device group DID, including granting a first permission to remove existing devices from the group of devices;
- in response to granting the scope of permission to the first device group DID, grant the first device DID a subset of the scope of permission, including granting the first device DID the first permission to remove existing devices from the group of devices;
- receive an indication to remove a particular device amongst the group of devices;
- verify removal of the particular device with an existing device that is not the particular device within the group of devices, the existing device having the first permission;
- and
- remove the particular device from the group of devices, including:
- revoking the scope of permission granted to a second device DID that is associated with the particular device;
- deactivating the second device DID;
- and
- recording a first transaction associated with revoking the scope of permission granted to the second device DID in a distributed ledger.
16 more elements
A method implemented in a computer system that includes a processor, for generating and associating a decentralized identifier (DID) for a group of one or more related devices, the method comprising:
- generating a device group DID for a group of devices by generating a private key of the device group DID based on a seed and a first hardware identifier of at least one device in the group of devices, wherein generating the device group DID or a device DID comprises:
- receiving a passphrase from a user;
- obtaining a constant value associated with the computing system;
- and
- using the passphrase and the constant value as inputs of a hash function to generate the device group DID;
- associating the device group DID with the group of devices;
- for at least one corresponding device in the group of devices,
- deriving a device DID by generating a private key of the device DID based on a seed, a second hardware identifier of the corresponding device, and the device group DID;
- and
- associating the device DID with the corresponding device;
- granting a scope of permission to the device group DID, including granting a first permission to add new devices into the group of devices;
- in response to granting the scope of permission to the device group DID, granting the device DID a subset of the scope of permission, including granting the device DID the first permission to add new devices into the group of devices, as such the device group DID and the device DID is only linked to the device group DID or a corresponding device, and no personally identifiable information is directly associated with the device group DID or the device DID;
- receiving a request for adding a new device to the group of devices;
- verifying the new device with an existing device within the group of devices having the first permission, including:
- causing the request to be sent to at least one device within the group of devices;
- and
- receiving a notification from the at least one device indicating that the request is approved;
- and
- adding the new device into the group of devices, including:
- deriving a new device DID;
- associating the new device DID with the new device;
- and
- granting the new device DID the subset of the scope of permission.
20 more elements
Dependencies are inferred from the claim text.