Patent ID: 9026789
Filing Date: 2015-05-05
Classification: G06F,H04L

Abstract:
1. A method in a first device, the method comprising: making a device certificate available to a second device in any manner, wherein the device certificate binds an identity of the first device to a public key of the first device; receiving from a process on the first device a certificate request comprising an indication of an identity of the process, a process public key, and an indication of one or more capabilities purported to be possessed by the process on the first device; verifying any of the one or more capabilities purported to be possessed by the process on the first device; and creating a process certificate that binds the identity of the process to the process public key, the process certificate comprising indications of the verified capabilities, the process certificate digitally signed using a private key of the first device that, together with the public key of the first device, forms a public/private key pair.