Systems and methods for providing secure access to embedded devices using a trust manager and a security broker

1. A method for providing secure access to embedded devices, the method being implemented by a trust manager, the method comprising:

receiving client account information from a client;

determining whether the client account information from the client is valid;

determining whether the client is authorized to access at least one embedded device that is in electronic communication with a security broker;

receiving security broker account information from the security broker;

determining whether the security broker account information from the security broker is valid;

determining whether the security broker is authorized to provide access to the at least one embedded device; and

if the client account information from the client is valid and the client is authorized to access the at least one embedded device, and if the security broker account information from the security broker is valid and the security broker is authorized to provide access to the at least one embedded device, establishing a secure trusted connection between the client and the security broker.

2. The method of claim 1 , wherein the method is performed in response to receiving a request from the client for access to the at least one embedded device.

3. The method of claim 1 , wherein the method is performed in response to receiving a request from the security broker to provide access to the at least one embedded device.

4. The method of claim 1 , wherein the client account information comprises:

security credentials for the client; and

authorization information for the client.

5. The method of claim 4 , wherein the security credentials for the client comprise a client identifier and a client secret.

6. The method of claim 4 , wherein the authorization information for the client comprises device access permissions.

7. The method of claim 1 , wherein determining whether the client account information is valid comprises comparing the client account information that was received from the client with validated client account information.

8. The method of claim 7 , wherein the validated client account information is stored on the trust manager.

9. The method of claim 1 , wherein the security broker account information comprises:

security credentials for the security broker; and

authorization information for the security broker.

10. The method of claim 9 , wherein the security credentials comprise a security broker identifier and a security broker secret.

11. The method of claim 9 , wherein the authorization information for the security broker comprises device provide permissions.

12. The method of claim 1 , wherein determining whether the security broker account information is valid comprises comparing the security broker account information that was received from the security broker with validated security broker account information.

13. The method of claim 12 , wherein the validated security broker account information is stored on the trust manager.

14. A trust manager that is configured to implement a method for providing secure access to embedded devices, the trust manager comprising:

a processor;

memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to implement a method comprising:

receiving client account information from a client;

determining whether the client account information from the client is valid;

determining whether the client is authorized to access at least one embedded device that is in electronic communication with a security broker;

receiving security broker account information from the security broker;

determining whether the security broker account information from the security broker is valid;

determining whether the security broker is authorized to provide access to the at least one embedded device; and

if the client account information from the client is valid and the client is authorized to access the at least one embedded device, and if the security broker account information from the security broker is valid and the security broker is authorized to provide access to the at least one embedded device, establishing a secure trusted connection between the client and the security broker.

15. The trust manager of claim 14 , wherein the method is performed in response to receiving a request from the client for access to the at least one embedded device.

16. The trust manager of claim 14 , wherein the method is performed in response to receiving a request from the security broker to provide access to the at least one embedded device.

17. The trust manager of claim 14 , wherein the client account information comprises security credentials for the client and authorization information for the client, and wherein the security broker account information comprises security credentials for the security broker and authorization information for the security broker.

18. A computer-readable medium comprising executable instructions for implementing a method for providing secure access to embedded devices, the method being implemented by a trust manager, the method comprising:

receiving client account information from a client;

determining whether the client account information from the client is valid;

determining whether the client is authorized to access at least one embedded device that is in electronic communication with a security broker;

receiving security broker account information from the security broker;

determining whether the security broker account information from the security broker is valid;

determining whether the security broker is authorized to provide access to the at least one embedded device; and

if the client account information from the client is valid and the client is authorized to access the at least one embedded device, and if the security broker account information from the security broker is valid and the security broker is authorized to provide access to the at least one embedded device, establishing a secure trusted connection between the client and the security broker.

19. The computer-readable medium of claim 18 , wherein the method is performed in response to receiving a request from the client for access to the at least one embedded device.

20. The computer-readable medium of claim 18 , wherein the method is performed in response to receiving a request from the security broker to provide access to the at least one embedded device.