Patent ID: 9621540
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. One or more non-transitory, machine readable media comprising a plurality of instructions stored thereon that in response to being executed result in a trusted computing device: establishing a first communication channel with a personal computing device, the trusted computing device having previously been provisioned for enterprise connectivity by receiving a first access certificate from a certificate server, wherein the first communication channel comprises direct wireless communications between the trusted computing device and the personal computing device; establishing a second communication channel with the certificate server, the trusted computing device having previously established a trust with the certificate server, wherein the second communication channel comprises communications between the trusted computing device and the certificate server over a network; generating a key pair on behalf of the personal computing device, the key pair comprising a public key and a private key; generating a certificate signing request on behalf of the personal computing device, the certificate signing request comprising the public key of the key pair generated on behalf of the personal computing device, wherein the certificate signing request is indicative of a request to provide the personal computing device with access to enterprise resources; sending the certificate signing request on behalf of the personal computing device; receiving a second access certificate for accessing enterprise resources on behalf of the personal computing device in response to sending the certificate signing request; and securely exporting the second access certificate and the private key of the key pair generated on behalf of the personal computing device to the personal computing device.