Patent ID: 7533258

Claim:
A method for controlling access to a service over a network, said method comprising: receiving a network-service credential at a device, wherein said network-service credential is issued by a provider of said service and includes a value to indicate that said device is enrolled in said network, wherein the value is selected from the group including a name of the service provider and an Internet Protocol (IP) address of the service provider; identifying a device-manufacturer credential that is stored in a non-volatile memory of said device and that identifies a manufacturer of said device; storing said network-service credential in said non-volatile memory on said device to replace the device-manufacturer credential, wherein the existence of said network-service credential in said non-volatile memory binds said device to said network and prevents said device from accessing other networks besides the network; and said device presenting said networkservice credential to the provider of said service, wherein said provider uses said network-service credential to authenticate and authorize said device, wherein upon authorization said device is provided access to said service.