# US 2026/0093548 A1 · Apparatus, method, and system for resource provider identity management and resource attestation and provisioning

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2026/0093548 A1
- Document ID: US20260093548A1
- Status: Published application
- Kind: A1
- Application number: 18/902,146
- Filed: 2024-09-30
- Published: 2026-04-02
- Earliest claimed: 2024-09-30
- Assignees: Nokia Solutions and Networks Oy
- Applicants: Nokia Solutions and Networks Oy
- Inventors: Novak BOSKOV; Manzoor KHAN; Aditya GUDAL; Joachim RIEMER; Juergen SIENEL; Thomas WILLIAMS; Buvaneswari RAMANAN
- Web page: https://patentgrep.com/patent/US20260093548A1

## CPC

- G06F 9/5044: {considering hardware capabilities}
- H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)}
- G06F 9/5077: {Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455)}
- G06F 21/44: Program or device authentication
- G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An approach is provided for resource provider identity management and resource attestation and provisioning. The approach involves, for example, determining a request to initiate a pre-provisioning of a resource component to an infrastructure network (e.g., Decentralized Physical Infrastructure Networks (DePIN). The request includes a specification label that advertises one or more capabilities of the resource. The approach also involves reading of a specification table and a unique identifier from the resource component. The approach further involves verification of the specification label based, at least in part, on the specification table. The approach further involves generating a bundle based, at least in part, on the specification table and the unique identifier. The bundle represents the verification of the specification label. The approach further involves associating the bundle with the resource component.

## Claims

### Claim 1

An apparatus comprising:
at least one processor; and
at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus at least to perform:
determining a request to initiate a pre-provisioning of a resource component to an infrastructure network, wherein the request includes a specification label that advertises one or more capabilities of the resource component;
causing, at least in part, a reading of a specification table and a unique identifier from the resource component;
causing, at least in part, a verification of the specification label based, at least in part, on the specification table;
generating a bundle based, at least in part, on the specification table and the unique identifier, wherein the bundle represents the verification of the specification label; and
associating the bundle with the resource component.

### Claim 2 (depends on 1)

The apparatus of claim 1, wherein the apparatus is caused to further perform:
determining another request to initiate a provisioning of the resource component to a resource pool of the infrastructure network, wherein the another request includes a proffered bundle associated with the resource component;
determining the bundle associated with the resource component during the pre-provisioning; and
causing, at least in part, an addition of the resource component to the resource pool based, at least in part, on a verification of the resource component based on matching the proffered bundle to the bundle associated with the resource component during the pre-provisioning.

### Claim 3 (depends on 2)

The apparatus of claim 2, wherein the determining of the bundle comprises: (1) causing, at least in part, a reading of the bundle from a non-volatile memory of the resource component; or (2) causing, at least in part, another reading of the specification table and the unique identifier from the resource component to reconstruct the bundle.

### Claim 4 (depends on 1)

The apparatus of claim 1, wherein the generating of the bundle is further based, at least on part, on a verification that the resource component has not previously been provisioned in the infrastructure network by a provider associated with the request or another provider.

### Claim 5 (depends on 4)

The apparatus of claim 4, wherein the verification that the resource component has not previously been provisioned in the infrastructure network by the provider associated with the request or the another provider is based on determining that any prior provisioning of the resource component in the infrastructure network does not overlap in time.

### Claim 6 (depends on 1)

The apparatus of claim 1, wherein the apparatus is caused to further perform:
determining one or more identity attributes associated with a provider of the resource component; and
generating a participation credential for the provider based on a verification of the one or more identity attributes and based on the one or more identity attributes,
wherein the participation credential identifies the provider in one or more subsequent interactions in the infrastructure network.

### Claim 7 (depends on 6)

The apparatus of claim 6, wherein the one or more identity attributes is based on zero-knowledge proof of a possession of one or more identity documents.

### Claim 8 (depends on 6)

The apparatus of claim 6, wherein the apparatus is caused to further perform:
associating a reputation score to the participation credential of the provider based on the one or more subsequent interactions in the infrastructure network.

### Claim 9 (depends on 6)

The apparatus of claim 6, wherein the generating of the bundle is further based, at least in part, on the participation credential.

### Claim 10 (depends on 1)

The apparatus of claim 1, wherein the bundle is associated with the resource component by storing the bundle in a memory of the resource component.

### Claim 11 (depends on 1)

The apparatus of claim 1, wherein the infrastructure network is a Decentralized Physical Infrastructure Network (DePIN).

### Claim 12 (depends on 1)

The apparatus of claim 1, wherein the resource component is a hardware component.

### Claim 13

A method comprising:
determining a request to initiate a pre-provisioning of a resource component to an infrastructure network, wherein the request includes a specification label that advertises one or more capabilities of the resource component;
causing, at least in part, a reading of a specification table and a unique identifier from the resource component;
causing, at least in part, a verification of the specification label based, at least in part, on the specification table;
generating a bundle based, at least in part, on the specification table and the unique identifier, wherein the bundle represents the verification of the specification label; and
associating the bundle with the resource component.

### Claim 14 (depends on 13)

The method of claim 13, further comprising:
determining another request to initiate a provisioning of the resource component to a resource pool of the infrastructure network, wherein the another request includes a proffered bundle associated with the resource component;
determining the bundle associated with the resource component during the pre-provisioning; and
causing, at least in part, an addition of the resource component to the resource pool based, at least in part, on a verification of the resource component based on matching the proffered bundle to the bundle associated with the resource component during the pre-provisioning.

### Claim 15 (depends on 14)

The method of claim 14, wherein the determining of the bundle comprises: (1) causing, at least in part, a reading of the bundle from a non-volatile memory of the resource component; or (2) causing, at least in part, another reading of the specification table and the unique identifier from the resource component to reconstruct the bundle.

### Claim 16 (depends on 13)

The method of claim 13, wherein the generating of the bundle is further based, at least on part, on a verification that the resource component has not previously been provisioned in the infrastructure network by a provider associated with the request or another provider.

### Claim 17

A non-transitory computer-readable storage medium, carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to perform:
determining a request to initiate a pre-provisioning of a resource component to an infrastructure network, wherein the request includes a specification label that advertises one or more capabilities of the resource component;
causing, at least in part, a reading of a specification table and a unique identifier from the resource component;
causing, at least in part, a verification of the specification label based, at least in part, on the specification table;
generating a bundle based, at least in part, on the specification table and the unique identifier, wherein the bundle represents the verification of the specification label; and
associating the bundle with the resource component.

### Claim 18 (depends on 17)

The non-transitory computer-readable storage medium of claim 17, wherein the apparatus is caused to further perform:
determining another request to initiate a provisioning of the resource component to a resource pool of the infrastructure network, wherein the another request includes a proffered bundle associated with the resource component;
determining the bundle associated with the resource component during the pre-provisioning; and
causing, at least in part, an addition of the resource component to the resource pool based, at least in part, on a verification of the resource component based on matching the proffered bundle to the bundle associated with the resource component during the pre-provisioning.

### Claim 19 (depends on 18)

The non-transitory computer-readable storage medium of claim 18, wherein the determining of the bundle comprises: (1) causing, at least in part, a reading of the bundle from a non-volatile memory of the resource component; or (2) causing, at least in part, another reading of the specification table and the unique identifier from the resource component to reconstruct the bundle.

### Claim 20 (depends on 17)

The non-transitory computer-readable storage medium of claim 17, wherein the generating of the bundle is further based, at least on part, on a verification that the resource component has not previously been provisioned in the infrastructure network by a provider associated with the request or another provider.
