Network system comprising a security management server and a home network, and method for including a device in the network system

A method for including a device in a network system comprising a security management server and secure home network controlled by an administrator, the method being executed by the security server and comprising:

• transmitting, to the administrator, a one-time-code associated to said device as well as a Uniform Resource Locator of the security management server, said one-time code being created by the security management server upon receipt of a request from the administrator,
• detecting a connection of said device using the one-time code and the Uniform Resource Locator, said one-time code and said Uniform Resource Locator being provided to said device by the administrator,
• receiving a user device certificate in response t sending a server certificate to said device and the first device verifying the server certificate with a server fingerprint,
• revoking the one time code,
• sending to said device a user device certificate signed with an administrator key associated to said administrator, the user device certificate being signed by the security management server and used by said device for connecting to second devices of the network system.

A security management server for adding a first device to a secured home network controlled by an administrator, wherein the security management server comprises a processor configured to:

• transmit, to the administrator, a one-time code associated with the first device, said one-time code being created by the security management server upon receipt of a request from the administrator,
• verify the one-time code embedded in a request for a server certificate received from the first device, the one-time code as well as a Uniform Resource locator being provided to the first device by the administrator,
• receive a user device certificate generated in the first device in response to sending a server certificate to the first device and the first device verifying the server certificate with a server fingerprint,
• revoke the one time code,
• send the user device certificate being signed with an administrator key associated to the administrator of the secured home network to the first device, the user device certificate being signed by the security management server and used by the first device for communication with a second device of the network system.

A device activated in a network system comprising a security management server and a secured home network controlled by an administrator, the device comprising a processor configured to:

• connect to the security management server using a one-time-code created by the security management server upon request from the administrator and a Uniform Resource locator of the security management server, said one-time code and Uniform Resource Locator being provided to the device by the administrator,
• receive a message from the security management server including a server certificate of the security management server,
• send a user device certificate to the security management server upon verification of the server certificate,
• receive, from the security management server, the user device certificate signed with an administrator key associated to the administrator of the secured home network after the one time code is revoked, and
• connect to second devices of the network system using the user device certificate signed with the administrator key for identification.