IP Library Granted Patent US 10,785,219
Granted Patent B1
US 10,785,219 · App. 14/942,332 · Granted Sep 22, 2020

Methods, systems, and computer readable mediums for securely establishing credential data for a computing device

Inventors: Jonathan Peter Streete (San Jose, CA); Christopher Michael Davis (Frisco, TX)
Assignee: EMC IP HOLDING COMPANY LLC
H04L63/0876
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,785,219
App. No.
14/942,332
Granted
Sep 22, 2020
Kind
B1
Abstract

Methods, systems, and computer readable mediums for securely establishing credential data for a computing device are disclosed. According to one example, a method includes assigning, by a credential manager, credential set data to a computing device and mapping the credential set data to a device identifier key associated with the computing device in a credential data store accessible by the credential manager. The method further includes receiving, from a provisioning service client, a credential set request message including the device identifier key by the credential manager in response to an activation of the computing device at a customer location site and sending, by the credential manager to the provisioning service client, the credential set data for authenticating the computing device at the customer location site.

Claims (34)

1. A method comprising:

assigning, by a credential manager, credential set data to a computing device;

mapping the credential set data to a device identifier key associated with the computing device in a credential data store accessible by the credential manager;

receiving, from a provisioning service client in a host device, a credential set request message including the device identifier key by the credential manager in response to an activation of the computing device in the host device at a customer location site, wherein the credential set request message is sent from the provisioning service client to the credential manager in response to the provisioning service client receiving an activation notification message from the computing device upon the activation of the computing device; and

sending, by the credential manager to the provisioning service client in the host device, the credential set data for authenticating the computing device at the customer location site.

2. The method of claim 1 comprising prompting a user entity to reset the credential set data in accordance to an established security policy.

3. The method of claim 1 comprising deleting an entry containing the credential set data from the credential data store after the credential manager sends the credential set data to the provisioning service client.

4. The method of claim 1 comprising transporting the computing device from a manufacturer location site associated with the credential manager to the customer location site.

5. The method of claim 1 wherein the credential set data includes a unique username and a unique password solely associated to the computing device.

6. The method of claim 1 wherein the provisioning service client resides in at least one of the computing device and a host device supporting the computing device.

7. The method of claim 1 wherein the credential set data is provided to the provisioning service client in either a plaintext format or an encrypted format.

8. A system comprising:

at least one physical computer; and

a credential manager implemented using the at least one physical computers for performing operations comprising:

assigning credential set data to a computing device;

mapping the credential set data to a device identifier key associated with the computing device in a credential data store accessible by the credential manager;

receiving, from a provisioning service client in a hardware host device, a credential set request message including the device identifier key to the credential data store in response to an activation of the computing device in the host device at a customer location site, wherein the credential set request message is sent from the provisioning service client to the credential manager in response to the provisioning service client receiving an activation notification message from the computing device upon the activation of the computing device; and

sending, to the provisioning service client in the hardware host device, the credential set data for authenticating the computing device at the customer location site.

9. The system of claim 8 wherein the provisioning service client is further configured to prompt a user entity to reset or replace the credential set in accordance to an established security policy.

10. The system of claim 8 wherein the credential manager is further configured to delete the credential set data from the credential data store after the credential manager sends the credential set data to the provisioning service client.

11. The system of claim 8 wherein the computing device is transported from a manufacturer location site associated with the credential manager to the customer location site.

12. The system of claim 8 wherein the credential set data includes a unique username and a unique password solely associated to the computing device.

13. The system of claim 8 wherein the provisioning service resides on at least one of a computing device and a host device supporting the computing device.

14. The system of claim 8 wherein the credential set data is provided by the credential manager to the provisioning service client in either a plaintext format or encrypted format.

15. A non-transitory computer readable medium having stored thereon executable instructions which, when executed by a processor of a computer, cause the computer to perform steps comprising:

assigning, by a credential manager, credential set data to a computing device;

mapping the credential set data to a device identifier key associated with the computing device in a credential data store accessible by the credential manager;

receiving, from a provisioning service client in a host device, a credential set request message including the device identifier key by the credential manager in response to an activation of the computing device in the host device at a customer location site, wherein the credential set request message is sent from the provisioning service client to the credential manager in response to the provisioning service client receiving an activation notification message from the computing device upon the activation of the computing device; and

sending, by the credential manager to the provisioning service client in the host device, the credential set data for authenticating the computing device at the customer location site.

16. The computer readable medium of claim 15 comprising prompting a user entity to reset the credential set data in accordance to an established security policy.

17. The computer readable medium of claim 15 comprising deleting an entry containing the credential set data from the credential data store after the credential manager sends the credential set data to the provisioning service client.

18. The computer readable medium of claim 15 comprising transporting the computing device from a manufacturer location site associated with the credential manager to the customer location site.

19. The computer readable medium of claim 15 wherein the credential set data includes a unique username and a unique password solely associated to the computing device.

20. The computer readable medium of claim 15 wherein the provisioning service client resides on at least one of the computing device and a host device supporting the computing device.

Assignments (6)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
MERGER Recorded Mar 26, 2020
From: VCE IP HOLDING COMPANY LLC
To: EMC IP HOLDING COMPANY LLC
Reel/Frame 052236/0497 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 8, 2016
From: VCE COMPANY, LLC
To: VCE IP HOLDING COMPANY LLC
Reel/Frame 040576/0161 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 17, 2015
From: STREETE, JONATHAN PETER; DAVIS, CHRISTOPHER MICHAEL
To: VCE COMPANY, LLC
Reel/Frame 037058/0154 →
Cited By (1)
US 12,547,695