Patent ID: 9313185
Filing Date: 2016-04-12
CPC Classification: H04L

Claim Text:
1. A computer-implemented method for authenticating devices, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying, at a computing system, a request from a device for a credentialing service to issue a credential to the device, the request comprising an application identifier encrypted with a first encryption key, the first encryption key having been derived by the device based on a token provisioned to the device by a vendor of the device; transmitting, from the computing system, the request to the credentialing service, wherein the credentialing service responds to the request by encrypting the credential with a second encryption key that was derived based on the token and by sending the encrypted credential to the computing system; receiving, at the computing system and from the credentialing service, the credential encrypted with the second encryption key, wherein the vendor has registered an application identified by the application identifier with the credentialing service; providing, from the computing system, the encrypted credential to the device, wherein the device derives the second encryption key based on the token and uses the second encryption key to decrypt the encrypted credential.