| CPC G06F 21/6218 (2013.01) [G06F 21/57 (2013.01); H04L 9/006 (2013.01); H04L 9/0838 (2013.01); H04L 9/0844 (2013.01); H04L 9/14 (2013.01); H04L 9/3226 (2013.01); H04L 63/0428 (2013.01); H04L 63/061 (2013.01); H04L 63/068 (2013.01); H04L 63/08 (2013.01); H04L 63/0838 (2013.01); H04L 63/0876 (2013.01); H04W 4/60 (2018.02); H04W 12/04 (2013.01); H04W 12/041 (2021.01); H04W 12/06 (2013.01); H04W 12/08 (2013.01); H04W 12/50 (2021.01); G06K 7/1417 (2013.01); H04W 4/70 (2018.02); H04W 4/80 (2018.02); H04W 84/12 (2013.01); H04W 88/02 (2013.01)] | 19 Claims |

|
1. A method for supporting a device provisioning protocol (DPP), the method performed by a server, the method comprising:
receiving, by the server and from a first computing device, (i) at least a portion of a tag value for a second computing device and (ii) a networks available list;
selecting a responder bootstrap public key using the portion of the tag value;
receiving, by the server and from the first computing device, a responder ephemeral public key;
conducting, by the server, an elliptic curve point addition with the responder bootstrap public key and the responder ephemeral public key to derive a point;
conducting, by the server, an elliptic curve Diffie-Hellman key exchange using the point and an initiator bootstrap private key in order to derive a shared secret;
sending, from the server and to the first computing device, the shared secret;
receiving, by the server and from the first computing device, a configuration attribute for the second computing device;
selecting, by the server, a set of network credentials for the second computing device using (i) the configuration attribute and (ii) the networks available list; and
sending, from the server and to the first computing device, the set of network credentials.
|