NETWORK DEVICE CERTIFICATE DEPLOYMENT USING SHORT-RANGE COMMUNICATIONS
Example aspects include a method performed by a newly-added device to a private network of a communication system. The method includes generating a self-signed digital certificate. The method further includes receiving, from a mobile configuration device, via a first short range wireless communication, a request for the self-signed digital certificate. The method also includes transmitting, in response to the request, via a second short range wireless communication, the self-signed digital certificate to the mobile configuration device. The method additionally includes performing, via the self-signed digital certificate, a handshake protocol with an existing device on the private network, the existing device having received the self-signed digital certificate from the mobile configuration device.
1 . An apparatus representing a newly-added device to a network of a communication system, the apparatus comprising:
one or more memories; and
one or more processors coupled with one or more memories and configured, individually or in combination, to:
generate a self-signed digital certificate;
receive, from a mobile configuration device, via a first short range wireless communication, a request for the self-signed digital certificate;
transmit, in response to the request, via a second short range wireless communication, the self-signed digital certificate to the mobile configuration device; and
perform, via the self-signed digital certificate, a handshake protocol with an existing device on the network, the existing device having received the self-signed digital certificate from the mobile configuration device.
2 . The apparatus in accordance with claim 1 , wherein the first short range wireless communication and the second short range wireless communication involve different short range wireless communication technologies.
3 . The apparatus in accordance with claim 1 , wherein the communication system is a video monitoring system, the newly-added device is a video capture device, and the existing device is any of (i) a storage device configured to manage storage of video capture information from the video capture device and (ii) a client device configured to permit view the video capture information.
4 . The apparatus in accordance with claim 1 , wherein the handshake protocol is based on the existing device verifying the self-signed digital certificate using an issue certificate of a certificate issuing device.
5 . The apparatus in accordance with claim 1 , wherein the self-signed digital certificate comprises a domain name, organization details, a validity period of the self-signed digital certificate, and a digital signature of a certificate issuing device (CID) that issued the self-signed digital certificate.
6 . The apparatus in accordance with claim 1 , wherein the self-signed digital certificate identifies the newly-added device.
7 . An apparatus representing a newly-added device to a network of a communication system, the apparatus comprising:
one or more memories; and
one or more processors coupled with one or more memories and configured, individually or in combination, to:
transmit, to a mobile configuration device, via a first short range wireless communication, a certificate signing request;
receive, from the mobile configuration device, via a second short range wireless communication, a digital certificate generated by a certificate authority installed on the mobile configuration device; and
perform, via the digital certificate, a handshake protocol with an existing device on the network, wherein the digital certificate is verifiable by the existing device using an issue certificate of the mobile configuration device.
8 . The apparatus in accordance with claim 7 , wherein the first short range wireless communication and the second short range wireless communication involve different short range wireless communication technologies.
9 . The apparatus in accordance with claim 7 , wherein the communication system is a video monitoring system, the newly-added device is a video capture device, and the existing device is any of (i) a storage device configured to manage storage of video capture information from the video capture device and (ii) a client device configured to permit view the video capture information.
10 . The apparatus in accordance with claim 7 , wherein the handshake protocol is based on the existing device verifying the digital certificate using an issue certificate of a certificate issuing device.
11 . The apparatus in accordance with claim 7 , wherein the handshake protocol comprises a Transport Layer Security handshake protocol.
12 . The apparatus in accordance with claim 7 , wherein the handshake protocol comprises a Transport Layer Security (TLS) handshake protocol and the issue certificate is a TLS certificate.
13 . An apparatus representing a mobile configuration device in a network of a communication system, the apparatus comprising:
one or more memories; and
one or more processors coupled with one or more memories and configured, individually or in combination, to:
receive a certificate signing request from a newly-added device to the network via a first short range wireless communication;
transmit the certificate signing request to a certificate issuing device;
receive, from the certificate issuing device, based on the certificate signing request, a digital certificate generated by the certificate issuing device; and
transmit the digital certificate to the newly-added device via a second short range wireless communication, wherein the digital certificate is configured to enable the newly-added device and an existing device on the network to perform a handshake protocol based on the existing device verifying the digital certificate based on an issue certificate of the certificate issuing device.
14 . The apparatus in accordance with claim 13 , wherein the first short range wireless communication and the second short range wireless communication involve different short range wireless communication technologies.
15 . The apparatus in accordance with claim 13 , wherein the one or more processors are further configured to exchange additional information with the newly-added device using a different communication than a communication used for the digital certificate used to authenticate the newly-added device and verifying that the digital certificate is provided by the newly-added device.
16 . The apparatus in accordance with claim 13 , further comprising displaying a code or digital certificate to the newly-added device and determining whether to accept the code or the digital certificate for distribution based on use of the code or the digital certificate by the newly-added device.
17 . The apparatus in accordance with claim 16 , wherein the code is a quick response (QR) code.
18 . An apparatus representing a certificate issuing device in a network of a communication system, the apparatus comprising:
one or more memories; and
one or more processors coupled with one or more memories and configured, individually or in combination, to:
receive a certificate signing request from a mobile configuration device, the certificate signing request generated by a newly-added device to the network and transmitted to the mobile configuration device via a first short range wireless communication;
generate, in response to the certificate signing request, using an issue certificate of the certificate issuing device, a digital certificate for the newly-added device; and
transmit the digital certificate to the mobile configuration device to be provided to the newly-added device via a second short range wireless communication, wherein the digital certificate is configured to enable the newly-added device and an existing device on the network to perform a handshake protocol based on the existing device verifying the digital certificate based on the issue certificate of the certificate issuing device.
19 . The apparatus in accordance with claim 18 , wherein the first short range wireless communication and the second short range wireless communication involve different short range wireless communication technologies.
20 . The apparatus in accordance with claim 18 , wherein the handshake protocol comprises a Transport Layer Security (TLS) handshake protocol and the issue certificate is a TLS certificate.