Device, system, and method for providing services between a communication device and an application server

1 . A method comprising:

establishing, at a gateway device, a trust session with an application server;

registering a communication device, the registering occurring in an absence of the communication device establishing a respective trust session with the application server, the registering occurring such that the communication device does not exchange a token and does not exchange a cryptographic key with the application server, either directly or via the gateway device;

providing, from the gateway device, to the application server, on behalf of the communication device served by the gateway device:

a service request that requests a service from the application server;

an indication of successful authentication of the gateway device by the application server, the indication associated with the trust session; and

a payload including an indicator of the communication device;

receiving, at the gateway device, from the application server, a verification of the service request determined using at least the indication associated with the trust session; and

providing, via one or more of the gateway device and a network, the service between the communication device and the application server.

2 . The method of claim 1 , further comprising:

receiving, at the gateway device, from an application client implemented by the communication device, the service request.

3 . The method of claim 1 , wherein the service request is generated by an application client implemented by the gateway device on behalf of the communication device.

4 . The method of claim 1 , where the trust session comprises an OpenID Connect (OIDC) session and the indication associated with the trust session comprises an OIDC token.

5 . The method of claim 1 , where the indicator of the communication device indicates one or more of: a given identifier of the communication device; and communication attributes of the communication device.

6 . The method of claim 1 , further comprising:

receiving, at the gateway device, from the application server, in conjunction with establishing the trust session, the indication associated with the trust session, the indication including a public key associated with the gateway device, the indication signed using a private key associated with the application server; and

signing, at the gateway device, the payload using a respective private key associated with the gateway device, such that the payload comprises a signed payload.

7 . A gateway device comprising:

a communication interface;

a controller; and

a non-transitory computer-readable storage medium having stored thereon program instructions that, when executed by the controller, cause the controller to perform a set of operations comprising:

establishing a trust session with an application server;

registering a communication device, the registering occurring in an absence of the communication device establishing a respective trust session with the application server, the registering occurring such that the communication device does not exchange a token and does not exchange a cryptographic key with the application server, either directly or via the gateway device;

providing, to the application server, on behalf of the communication device served by the gateway device:

a service request that requests a service from the application server;

an indication of successful authentication of the gateway device by the application server, the indication associated with the trust session; and

a payload including an indicator of the communication device;

receiving, from the application server, a verification of the service request determined using at least the indication associated with the trust session, such that, the service is provided between the communication device and the application server via one or more of the communication interface and a network.

8 . The gateway device of claim 7 , where the set of operations further comprise:

receiving from an application client implemented by the communication device, the service request.

9 . The gateway device of claim 7 , wherein the service request is generated by an application client implemented by the gateway device on behalf of the communication device.

10 . The gateway device of claim 7 , where the trust session comprises an OpenID Connect (OIDC) session and the indication associated with the trust session comprises an OIDC token.

11 . The gateway device of claim 7 , where the indicator of the communication device indicates one or more of: a given identifier of the communication device; and communication attributes of the communication device.

12 . The gateway device of claim 7 , where the set of operations further comprise:

receiving from the application server, in conjunction with establishing the trust session, the indication associated with the trust session, the indication including a public key associated with the gateway device, the indication signed using a private key associated with the application server; and

signing the payload using a respective private key associated with the gateway device, such that the payload comprises a signed payload.

13 . The gateway device of claim 7 , wherein the set of operations further comprise:

providing the service between the communication device and the application server via the communication interface.

14 . The gateway device of claim 7 , wherein the set of operations further comprise:

communicating with the communication device, or a respective application client, and the application server to cause the communication device, or the respective application client, and the application server, to establish such a communication link therebetween to provide the service.

15 . A system comprising:

an application server; and

a gateway device comprising a hardware processor configured to:

establish a trust session with the application server;

register a communication device, the registering occurring in an absence of the communication device establishing a respective trust session with the application server, the registering occurring such that the communication device does not exchange a token and does not exchange a cryptographic key with the application server, either directly or via the gateway device;

provide, to the application server, on behalf of the communication device served by the gateway device:

a service request that requests a service from the application server;

an indication of successful authentication of the gateway device by the application server, the indication associated with the trust session; and

a payload including an indicator of the communication device;

receive, from the application server, a verification of the service request, wherein the service is provided between the communication device and the application server when or after the verification is received;

the application server configured to:

receive, from the gateway device, the service request, the indication associated with the trust session, and the payload;

verify the service request using at least the indication associated with the trust session; and, in response,

provide, to the gateway device, a verification of the service request; and

grant the service to the communication device.

16 . The system of claim 15 , wherein the application server is further configured to:

verify that the gateway device is eligible to represent the communication device.

17 . The system of claim 15 , wherein the application server is further configured to verify that the gateway device is eligible to represent the communication device:

obtaining the indicator of the communication device from the payload; and

checking the indicator of the communication device against a list of identifiers of communication devices that the gateway device is eligible to represent.

18 . The system of claim 15 , wherein the service is provided between the communication device and the application server via one or more of the gateway device and a network.