Patent ID: 9325697
Filing Date: 2016-04-26
CPC Classification: H04L

Claim Text:
1. A method for provisioning and managing certificates in a network, the method comprising: generating a signing certificate by a network device based on a root certificate of the network device; signing a client-device certificate for a client device based on the signing certificate of the network device; and providing the signed client-device certificate to the client device, wherein the client-device certificate allows the client device to access a secure service provided by the network device; wherein the signed client-device certificate is specifically associated with the network device and does not allow the client device to access a secure service provided by another network device, and the signed client-device certificate includes a first Media Access Control (MAC) address, wherein if a second MAC address used by a client device requesting access to a secure service does not match the first MAC address, a connection between the network device and the client device is terminated.