Patent ID: 7953976

Claim:
An apparatus comprising: at least one processor; a discoverer which finds at least one device configured as a personal authentication gateway capable of responding to token requests for access credentials from at least one pervasive device included in a pervasive authentication domain, the pervasive authentication domain including devices authorized to share access credentials; a token requestor which sends at least one token request for at least one token required by the at least one pervasive device; a token client which accepts at least one token response including the access credentials from the device configured as a personal authentication gateway; wherein the access credentials allow the at least one pervasive device to authenticate to one or more services on behalf of a user as configured in the device configured as a personal authentication gateway; and an arrangement adapted to register a pervasive device to be a member of a pervasive authentication domain by registering with the device configured as a personal authentication gateway; wherein said registering arrangement comprises: an arrangement adapted to enter a same random password on the pervasive device as on the device configured as the personal authentication gateway; an arrangement adapted to receive an encryption key and encrypted value generated on the device configured as the personal authentication gateway; an arrangement adapted to compute a fingerprint of the value encrypted by the encryption key and the same random password; and an arrangement adapted to compare the fingerprint of the value on the pervasive device.