IP Library Granted Patent US 11,062,017
Granted Patent B2
US 11,062,017 · App. 16/112,560 · Granted Jul 13, 2021

Scoping mechanism for globally unique device identification

Inventors: Nicole Elaine Berdy (Kirkland, WA); Affan A. Dar (Redmond, WA); Simon D. Porter (Woodinville, WA)
Assignee: Microsoft Technology Licensing, LLC
G06F21/45H04L41/0806H04L63/08H04L67/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,062,017
App. No.
16/112,560
Granted
Jul 13, 2021
Kind
B2
Abstract

A method for uniquely authenticating a device provides for receiving a scoping request, allocating a scope ID responsive to the request, and storing one or more device identification credentials in a database. Each device identification credential stored in the database includes the allocated scope ID and a device ID provided within the scoping request. The method further provides for receiving a registration request specifying a device identification credential and authenticating the specified device identification credential by confirming a match between the specified device identification credential and one of the device identification credentials stored in the database. The method further provides for provisioning the device with initial configuration information responsive to the authentication.

Claims (47)

1. A method comprising:

allocating a scope ID associated with one or more device IDs responsive to receipt of a scoping request, the scoping request indicating the one or more device IDs;

storing, in a database, one or more device identification credentials, each individual one of the device identification credentials including the scope ID and an associated one of the device IDs;

receiving a registration request from a device, the registration request specifying a device identification credential including the allocated scope ID and one of the device IDs associated with the device;

authenticating uniqueness of the allocated scope ID and the device ID associated with the device included within the specified device identification credential by identifying a matching scope ID and device ID associated with the device within one of the device identification credentials stored in the database; and

provisioning the device through a network with initial configuration information responsive to the authentication of the allocated scope ID and the device ID within the specified device identification credential for the device.

2. The method of claim 1 , wherein the method further comprises:

receiving a smart hub designation request identifying a designated smart hub in association with the allocated scope ID and a subset of the one or more device IDs; and

storing, in the database, an identifier for the designated smart hub in association with a subset of the device identification credentials including the allocated scope ID and one of the device IDs included in the subset specified by the smart hub designation request.

3. The method of claim 2 , wherein the initial configuration information includes connection information for communicating with the designated smart hub.

4. The method of claim 2 , wherein the method further comprises:

registering the specified device identification credential with the designated smart hub responsive to the authentication, wherein the initial configuration information includes a registration credential from the designated smart hub.

5. The method of claim 2 , wherein the device is hardcoded to contact a global provisioning service instead of the designated smart hub.

6. The method of claim 1 , wherein each of the device identification credentials stored in the database includes an allocated scope ID, one of the device IDs, and a key that is set by a user.

7. The method of claim 1 , wherein the initial configuration information includes configuration instructions provided by a designated smart hub.

8. A system comprising:

memory;

a database; and

a global provisioning service stored in the memory and executable to:

allocate a scope ID associated with one or more device IDs responsive to receipt of a scoping request, the scoping request indicating the one or more device IDs;

store, in the database, one or more device identification credentials, each individual one of the device identification credentials including the allocated scope ID and an associated one of the device IDs;

receive a registration request from a device, the registration request specifying a device identification credential including the allocated scope ID and one of the device IDs associated with the device;

authenticate uniqueness of the allocated scope ID and the device ID associated with the device included within the specified device identification credential by identifying a matching scope ID and device ID associated with the device within one of the device identification credentials stored in the database; and

provision the device through a network with initial configuration information responsive to the authentication of the allocated scope ID and the device ID within the specified device identification credential for the device.

9. The system of claim 8 , wherein the global provisioning service is further executable to:

receive a smart hub designation request identifying a designated smart hub in association with the allocated scope ID and a subset of the one or more device IDs; and

store, in the database, an identifier for the designated smart hub in association with a subset of the device identification credentials including the allocated scope ID and one of the device IDs included in the subset specified by the smart hub designation request.

10. The system of claim 9 , wherein the initial configuration information includes connection information for communicating with the designated smart hub.

11. The system of claim 9 , wherein the global provisioning service is further executable to:

register the specified device identification credential with the designated smart hub responsive to the authentication, wherein the initial configuration information includes a registration credential from the designated smart hub.

12. The system of claim 11 , wherein the device is hardcoded to contact the global provisioning service instead of the designated smart hub.

13. The system of claim 9 , wherein each of the device identification credentials stored in the database includes an allocated scope ID, one of the device IDs, and a key that is set by a user.

14. The system of claim 9 , wherein the initial configuration information includes configuration instructions provided by a designated smart hub.

15. One or more memory devices encoding computer-executable instructions for executing a computer process comprising:

allocating a scope ID associated with one or more device IDs responsive to receipt of a scoping request, the scoping request indicating the one or more device IDs;

storing, in a database, one or more device identification credentials, each individual one of the device identification credentials including the allocated scope ID and an associated one of the device IDs;

receiving a registration request from a device, the registration request specifying a device identification credential including the allocated scope ID and a device ID associated with the device;

authenticating uniqueness of the allocated scope ID and the device ID associated with the device included within the specified device identification credential by identifying a matching scope ID and device ID associated with the device within one of the device identification credentials stored in the database; and

provisioning the device through a network with initial configuration information responsive to the authentication of the allocated scope ID and the device ID within the specified device identification credential for the device.

16. The one or more memory device of claim 15 , wherein the computer-executable instructions further comprise:

receiving a smart hub designation request identifying a designated smart hub in association with the allocated scope ID and a subset of the one or more device IDs; and

storing, in the database, an identifier for the designated smart hub in association with a subset of the device identification credentials including the allocated scope ID and one of the device IDs included in the subset specified by the smart hub designation request.

17. The one or more memory device of claim 16 , wherein the initial configuration information includes connection information for communicating with the designated smart hub.

18. The one or more memory device of claim 16 , wherein the computer-executable instructions further comprise:

registering the specified device identification credential with the designated smart hub responsive to the authentication, wherein the initial configuration information includes a registration credential from the designated smart hub.

19. The one or more memory device of claim 15 , wherein each of the device identification credentials stored in the database includes an allocated scope ID, one of the device IDs, and key that is set by a user.

20. The one or more memory device of claim 15 , wherein the initial configuration information includes configuration instructions provided by a designated smart hub.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 24, 2018
From: BERDY, NICOLE ELAINE; DAR, AFFAN A.; PORTER, SIMON D.
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 046702/0064 →
Continuity (1)
Related Publication 20200065473A1 · Feb 27, 2020