Patent ID: 8505078

Claim:
A method of gaining authorized access to a restricted resource on another device, comprising: receiving, at an accessor device, an access credential from an external authorization entity having a direct or an indirect trust relationship with an accessee device, wherein the access credential includes a modification detection indicator created by the external authorization entity, at least one access privilege representation, and an accessor public key; communicating, to the accessee device, the access credential, a proof of identity, and a request for interaction with at least one device resource on the accessee device; and receiving, at the accessor device, a result of an access authentication process that verifies an authenticity of the access credential based on the modification detection indicator created by the external authorization entity, verifies the proof of identity based on the accessor public key, and verifies that the at least one access privilege representation in the access credential corresponds to a privilege to access the at least one device resource in the request for interaction, wherein the result of the access authentication process grants or denies the accessor device access to the at least one device resource on the accessee device.