Patent ID: 8799646
Filing Date: 2014-08-05
Classification: H04L

Abstract:
1. A computer-implemented method for authenticating a device coupled to a computing system comprising at least one processor, at least a portion of the method being performed by the computing system, the method comprising: identifying, at the computing system, a request from the device for a credentialing service to issue a credential to the device, the request comprising an application identifier encrypted with a first encryption key, the first encryption key having been derived by the device based on a token provisioned to the device by a vendor of the device; transmitting, from the computing system, the request to the credentialing service, wherein the credentialing service responds to the request by encrypting the credential with a second encryption key that was derived based on the token and by sending the encrypted credential to the computing system; receiving, at the computing system and from the credentialing service, the credential encrypted using a second encryption key, wherein the vendor has registered an application identified by the application identifier with the credentialing service by transmitting the first encryption key, the second encryption key, the application identifier, and a vendor identifier to the credentialing service; providing, from the computing system, the encrypted credential to the device, wherein the device derives the second encryption key based on the token and uses the second encryption key to decrypt the encrypted credential.