# US 2025/0158831 A1 · Systems, methods, and apparatuses for network management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0158831 A1 - Document ID: US20250158831A1 - Status: Published application - Kind: A1 - Application number: 18/771,583 - Filed: 2024-07-12 - Published: 2025-05-15 - Earliest claimed: 2020-05-29 - Assignees: Comcast Cable Communications, LLC - Applicants: Comcast Cable Communications, LLC - Inventors: Asad Haque; Bahar Limaye - Web page: https://patentgrep.com/patent/US20250158831A1 ## CPC - H04L 9/3247: {involving digital signatures} - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 41/0879: {Manual configuration through operator} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/126: {the source of the received data} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods, systems, and apparatuses for network management are described. A network device may provide a network that is accessible using a network credential. An internet of things (IoT) device may be required to be configured or provisioned before joining the network. The IoT device may be associated with a scannable identifier. A user device may determine the scannable identifier and, based on the scannable identifier, provide provisioning credentials to the IoT device. ## Claims ### Claim 1 A method comprising: receiving, by a computing device, from an device, via a first communications network, a first notification comprising a device identifier associated with the device; receiving, by the computing device, from an associated device, via a second communications network, a second notification comprising the device identifier associated with the device; and causing, based on a network credential associated with the second communications network, the device to communicate with a certificate authority via the second communications network. ### Claim 2 (depends on 1) The method of claim 1, wherein the computing device comprises a service provider server and wherein the device comprises at least one of: a camera, a thermostat, a sensor, an air purifier, a doorbell, a voice enabled device, a remote control, or the like. ### Claim 3 (depends on 1) The method of claim 1, wherein the first notification comprises a request for the network credential associated with the second communications network and wherein the second notification comprises a token. ### Claim 4 (depends on 1) The method of claim 1, wherein receiving the second notification further comprises receiving, from the associated device, based on a scanned identifier, the second notification wherein the scanned identifier is associated with the device, and wherein the scanned identifier comprises a physical indicator affixed to the device. ### Claim 5 (depends on 1) The method of claim 1, wherein receiving the second notification further comprises: scanning, by the associated device, a physical indicator affixed to the device; and converting the scan of the physical indicator to the device identifier in the second notification. ### Claim 6 (depends on 1) The method of claim 1, further comprising determining, based on the device identifier in the first notification matching the device identifier in the second notification, account information associated with the associated device, wherein the account information comprises the network credential. ### Claim 7 (depends on 1) The method of claim 1, wherein causing the device to communicate with the certificate authority further comprises causing the device to at least: generate, by the device, a key pair, wherein the key pair comprises a private key and a public key; generate, based on the private key, a certificate signing request (CSR); send, to the certificate authority, via the second communications network, the CSR, the public key, and a security token; and receive, from the certificate authority, via the second communications network, a signed identity certificate. ### Claim 8 A method comprising: based on a device identifier being sent in a first notification associated with an account to a computing device, receiving, by a device, from the computing device, via a first communications network a network credential of a second communications network associated with the account; establishing, based on the network credential, via the second communications network, a communication session with a certificate authority; and receiving, by the device, from the certificate authority, via the communication session, an identity certificate. ### Claim 9 (depends on 8) The method of claim 8, wherein the computing device comprises a service provider server and wherein the device comprises at least one of: a camera, a thermostat, a sensor, an air purifier, a doorbell, a voice enabled device, or a remote control. ### Claim 10 (depends on 8) The method of claim 8, the first notification comprises a request for the network credential associated with the second communications network. ### Claim 11 (depends on 8) The method of claim 8, wherein determining that the first notification is associated with the account comprises determining that the device identifier associated with the first notification matches an identifier associated with the account, wherein the account comprises a purchaser account. ### Claim 12 (depends on 8) The method of claim 8, further comprising: generating, by the device, a key pair, wherein the key pair comprises a private key and a public key; generating, based on the private key, a request for the identity certificate; and sending, via the communication session, the request for the identity certificate. ### Claim 13 (depends on 12) The method of claim 12, wherein sending, via the communication session, the request for the identity certificate comprises sending, to the certificate authority, the request for the identity certificate, the public key, and a security token. ### Claim 14 (depends on 8) The method of claim 8, further comprising: receiving, from an application server, a public key associated with the application server; encrypting, based on the public key associated with the application server, data into encrypted data; and sending, via the second communications network, the encrypted data to the application server. ### Claim 15 A method comprising: establishing, by a device, based on a device identifier associated with the device, a first communication session with an associated device, wherein the device identifier associated with the device matches the device identifier stored in the associated device; and receiving, from a certificate authority, via a second communication session, an identity certificate. ### Claim 16 (depends on 15) The method of claim 15, wherein the device comprises at least one of: a camera, a thermostat, a sensor, an air purifier, a doorbell, a voice enabled device, or a remote control, and wherein the associated device comprises at least one of: a smartphone, a computer, a laptop, or a tablet. ### Claim 17 (depends on 15) The method of claim 15, further comprising: generating, by the device, a key pair, wherein the key pair comprises a private key and a public key; generating, based on the private key, a request for the identity certificate; and sending, via the second communication session, the request for the identity certificate. ### Claim 18 (depends on 17) The method of claim 17, wherein sending, via the second communication session, the request for the identity certificate comprises sending, to the certificate authority, the request for the identity certificate, the public key, and a security token. ### Claim 19 (depends on 15) The method of claim 15, further comprising: receiving, from an application server, a public key associated with the application server; encrypting, based on the public key associated with the application server, data into encrypted data; and sending the encrypted data to the application server. ### Claim 20 (depends on 19) The method of claim 19, further comprising: receiving, from the application server, the encrypted data; and decrypting, based on a private key, the encrypted data.