Self-to-self delegation ownership transfers for endpoint device onboarding
AssigneeDell Products L.P.
InventorsBRADLEY K. GOODMAN, MAHESH BABU RAMAIAH
Life of this patent
Estimating the term…
Abstract
Methods and systems for managing endpoint devices are disclosed. The endpoint devices may be managed by onboarding them. To onboard the endpoint devices, ownership vouchers may be used to cryptographically verify to which entities authority over the endpoint devices have been delegated. The ownership vouchers may be used by a current owner to delegate authority to himself or herself while maintaining the same level of cryptographical security. The self-to-self delegation may also include onboarding instructions that a current owner wish to implement during the onboarding of the current owner's endpoint device.
Claims20
A method for managing endpoint devices, the method comprising:
- during an onboarding of an endpoint device of the endpoint devices:
- obtaining, by the endpoint device, an ownership voucher, the ownership voucher comprising a self-to-self delegation of authority from a current owner of the endpoint device to the current owner;
- cryptographically validating, by the endpoint device and using the ownership voucher and a private key of a public private key pair of the current owner, that the current owner still has authority over the endpoint device in view of the self-to-self delegation of authority;
- and
- applying, by the endpoint device and in response to validating that the current owner still has authority over the endpoint device, first onboarding instructions specified in the self-to-self delegation of authority to complete the onboarding of the endpoint device.
A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing endpoint devices, the operations comprising:
- during an onboarding of an endpoint device of the endpoint devices:
- obtaining, by the endpoint device, an ownership voucher, the ownership voucher comprising a self-to-self delegation of authority from a current owner of the endpoint device to the current owner;
- cryptographically validating, by the endpoint device and using the ownership voucher and a private key of a public private key pair of the current owner, that the current owner still has authority over the endpoint device in view of the self-to-self delegation of authority;
- and
- applying, by the endpoint device and in response to validating that the current owner still has authority over the endpoint device, first onboarding instructions specified in the self-to-self delegation of authority to complete the onboarding of the endpoint device.
An endpoint device, comprising:
- a processor;
- and
- a memory coupled to the processor to store instructions, which when executed by the processor, cause the endpoint device to perform operations for onboarding, the operations comprising:
- during an onboarding of the endpoint device:
- obtaining, by the endpoint device, an ownership voucher, the ownership voucher comprising a self-to-self delegation of authority from a current owner of the endpoint device to the current owner;
- cryptographically validating, by the endpoint device and using the ownership voucher and a private key of a public private key pair of the current owner, that the current owner still has authority over the endpoint device in view of the self-to-self delegation of authority;
- and
- applying, by the endpoint device and in response to validating that the current owner still has authority over the endpoint device, first onboarding instructions specified in the self-to-self delegation of authority to complete the onboarding of the endpoint device.
Dependencies are inferred from the claim text.