US 12,464,355 B2
Secure device onboarding techniques
Ned M. Smith, Beaverton, OR (US); Mats Gustav Agerstam, Portland, OR (US); Nathan Heldt-Sheller, Portland, OR (US); and Abhilasha Bhargav-Spantzel, Santa Clara, CA (US)
Assigned to Intel Corporation, Santa Clara, CA (US)
Filed by Intel Corporation, Santa Clara, CA (US)
Filed on Jul. 22, 2022, as Appl. No. 17/870,998.
Application 17/870,998 is a continuation of application No. 16/647,403, granted, now 11,399,285, previously published as PCT/US2018/053486, filed on Sep. 28, 2018.
Claims priority of provisional application 62/625,184, filed on Feb. 1, 2018.
Claims priority of provisional application 62/582,134, filed on Nov. 6, 2017.
Prior Publication US 2023/0009787 A1, Jan. 12, 2023
Int. Cl. H04W 12/08 (2021.01); H04L 9/40 (2022.01); H04W 8/00 (2009.01); H04W 12/30 (2021.01); H04W 12/50 (2021.01)
CPC H04W 12/08 (2013.01) [H04L 63/1458 (2013.01); H04W 8/005 (2013.01); H04W 12/35 (2021.01); H04W 12/50 (2021.01)] 17 Claims
OG exemplary drawing
 
1. A device, comprising:
processing circuitry; and
a storage device including instructions embodied thereon, wherein the instructions, which when executed by the processing circuitry, cause the device to perform operations to:
invoke an onboarding procedure to enable the device to join a network platform;
transmit a unique identifier of the device from the device to a rendezvous service associated with the network platform;
receive onboarding information from the rendezvous service, based on the unique identifier, wherein the rendezvous service verifies the unique identifier before providing the onboarding information to the device;
transmit a first set of credentials to an onboarding service, wherein the onboarding service is identified by using the onboarding information, wherein the onboarding service enables the device to connect to the network platform based on the first set of credentials, and wherein the first set of credentials includes the unique identifier and a value based on a cryptographic key embedded in the device by a manufacturer of the device;
receive a second set of credentials based on accessing the onboarding service; and
perform secure communications with the network platform, based on use of the second set of credentials.