US 12,407,678 B2
Security schema for secure device onboarding
Anish Clements, Pleasanton, CA (US); Sudarshan Masthan Boppana Mani, San Jose, CA (US); and Vaishali Sharma, San Jose, CA (US)
Assigned to CISCO TECHNOLOGY, INC., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Jun. 7, 2023, as Appl. No. 18/330,585.
Prior Publication US 2024/0414150 A1, Dec. 12, 2024
Int. Cl. G06F 7/04 (2006.01); H04L 9/40 (2022.01); H04W 12/72 (2021.01)
CPC H04L 63/083 (2013.01) [H04L 63/0876 (2013.01); H04W 12/72 (2021.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a Connectivity Management Platform (CMP), a request for a secure device onboarding (SDO) access token from a Device Management Platform (DMP), wherein the request includes an identifier for a user, an identifier for a customer organization, and an authorization code;
verifying the authorization code via an authorization server;
upon verifying the authorization code, querying, by the CMP, an enterprise server using the identifier for the user and the identifier for the customer organization to confirm whether the user belongs to the customer organization; and
based on determining that the user belongs to the customer organization:
generating, by the CMP, the SDO access token;
storing the SDO access token in an authentication datastore of the CMP; and
transmitting, by the CMP, the SDO access token to the DMP for use in one or more device transactions.