Patent ID: 11606210

Abstract:
The disclosed technology teaches providing limited usage of a first device that includes local resources for verifying authenticity of a Macaroon access token with caveats (MATwC), a unique key and a local proximity interface. A second device used by the service technician receives the MATwC, establishes a connection with the first device over the local proximity interface using the MATwC, and sends a request to enter limited usage mode. The MATwC originated with an authentication server as a MAT, using the unique key of the first device and modified by appending caveats that narrowed authorization provided by the MAT with the limited usage mode, and applied a message authentication code chaining algorithm to sign a resulting the MATwC. The first device performs local authentication of the MATwC, evaluating the appended caveats and enters the limited usage mode consistent with the appended caveats, without requiring connected resources to authenticate the MATwC.