Patent ID: 8103871

Claim:
A method comprising: registering, at a device configured as a personal authentication gateway, at least one pervasive device for membership in a pervasive authentication domain, the pervasive authentication domain including devices authorized to share access credentials; ascertaining the device configured as a personal authentication gateway from the at least one pervasive device included in a pervasive authentication domain; sending at least one token request from the at least one pervasive device to the device configured as a personal authentication gateway; and receiving a token response including the access credentials from the device configured as a personal authentication gateway; wherein the access credentials allow the at least one pervasive device to authenticate to one or more services on behalf of a user as configured in the device configured as a personal authentication gateway; and wherein said registering step comprises: entering a same random password on the at least one pervasive device and the device configured as a personal authentication gateway; generating on the device configured as a personal authentication gateway a protected encryption key by having Slave_ID_Secret encrypted by the same random password; transferring the protected key to the at least one pervasive device and computing a fingerprint of the protected key on the device configured as a personal authentication gateway; and comparing the fingerprint of the received and decrypted protected encryption key on the at least one pervasive device.