Granted Patent B2

US 12,395,339 · App. 18/452,276 · Granted Aug 19, 2025

Inventors: Eric A. Voit (Bethesda, MD); Yesu Lu (San Jose, CA); Eliot Lear (Wetzikon, CH); Ashok K. Moghe (Pleasanton, CA)

Assignee: CISCO TECHNOLOGY, INC.

H04L9/3213H04L9/30H04L9/3273H04L9/3297

Abstract

Claims (77)

1. A method comprising:

obtaining an authentication request at a computing device that is connected to a power source via a combined power/data connection, the authentication request including a freshness mechanism provided by the power source;

signing an authentication response with a private key associated with a verified identity of the computing device stored on the computing device, the authentication response including the freshness mechanism;

providing the authentication response to the power source;

receiving power at the computing device from the power source; and

obtaining a reauthentication token from the power source, the reauthentication token authenticating the computing device with the verified identity for a subsequent connection of the computing device to the power source, wherein the reauthentication token is encrypted with a public key associated with the private key.

2. The method of claim 1 , further comprising storing the reauthentication token in a nonvolatile memory of the computing device.

3. The method of claim 1 , further comprising:

detecting that the combined power/data connection between the computing device and the power source is disconnected;

providing the reauthentication token to the power source to enable the computing device to reauthenticate the verified identity to the power source after the combined power/data connection between the computing device and the power source has been reconnected; and

receiving power at the computing device from the power source over the combined power/data connection.

4. The method of claim 3 , further comprising authenticating the power source before providing the reauthentication token to the power source.

5. The method of claim 4 , wherein authenticating the power source comprises:

obtaining a timestamp signed by a private key associated with the power source; and

verifying the timestamp with a public key associated with the power source.

6. The method of claim 3 , wherein a power level received over the combined power/data connection after the combined power/data connection has been reconnected corresponds to a requested power level provided with the reauthentication token.

7. The method of claim 1 , further comprising:

establishing a mutually authenticated secure communication channel between the computing device and the power source; and

obtaining a reauthentication token from the power source.

8. The method of claim 1 , further comprising providing a requested power level from the computing device to the power source, wherein the power source provides the power to the computing device in response to the authentication response.

9. The method of claim 8 , further comprising:

receiving a default power level at the computing device before obtaining the authentication request; and

receiving the requested power level at the computing device after providing the authentication response.

10. The method of claim 1 , further comprising:

determining a first amount of power consumed by the computing device during a predetermined time period; and

providing to the power source an indication of the first amount of power.

11. The method of claim 1 , further comprising:

determining a first amount of power consumed by the computing device during a predetermined time period;

obtaining from the power source an indication of a second amount of power provided to the computing device by the power source during the predetermined time period; and

comparing the first amount of power with the second amount of power to determine a measure of power leakage over the combined power/data connection during the predetermined time period.

12. An apparatus comprising:

a combined power/data interface configured to receive power and communicate with a power source;

a hardware storage device configured to store a private key associated with a verified identity of the apparatus; and

a processor coupled to the combined power/data interface and the hardware storage device, the processor configured to:

obtain an authentication request via the combined power/data interface, the authentication request including a nonce provided by the power source;

sign the nonce with the private key to generate a signed nonce;

cause the combined power/data interface to provide an authentication response including the signed nonce to the power source;

receive power for the apparatus from the power source over the combined power/data interface; and

obtain a reauthentication token from the power source, the reauthentication token authenticating the apparatus with the verified identity for a subsequent connection of the apparatus to the power source, wherein the reauthentication token is encrypted with a public key associated with the Private key.

13. The apparatus of claim 12 , wherein the processor is further configured to:

detect that the combined power/data interface is disconnected from the power source;

determine that the combined power/data interface is reconnected to the power source;

cause the combined power/data interface to provide the reauthentication token to the power source to enable the apparatus to reauthenticate the verified identity to the power source; and

receive power for the apparatus from the power source over the combined power/data interface after it has been reconnected to the power source.

14. The apparatus of claim 13 , wherein a power level received over the combined power/data interface after the combined power/data interface has been reconnected to the power source corresponds to a requested power level indicated in the authentication response.

15. The apparatus of claim 12 , wherein the processor is further configured to:

establish a mutually authenticated secure communication channel between the apparatus and the power source; and

obtain a reauthentication token from the power source.

16. The apparatus of claim 12 , wherein the processor is further configured to cause the combined power/data interface to provide a requested power level to the power source, wherein the power source provides the power for the apparatus in response to the authentication response.

17. The apparatus of claim 16 , wherein the combined power/data interface is further configured to:

receive a default power level for the apparatus before obtaining the authentication request; and

receive the requested power level for the apparatus after providing the authentication response.

18. A system comprising:

a power source configured to provide power to devices associated with at least one of a plurality of verified identities; and

a computing device configured to:

connect to the power source via a combined power/data connection;

obtain an authentication request from the power source, the authentication request including a nonce provided by the power source;

sign the nonce with a private key stored on the computing device to generate a signed nonce, the private key associated with a verified identity of the computing device;

provide an authentication response including the signed nonce to the power source;

receive power at the computing device from the power source; and

obtain a reauthentication token from the power source, the reauthentication token authenticating the computing device with the verified identity for a subsequent connection of the computing device to the power source, wherein the reauthentication token is encrypted with a public key associated with the private key.

19. The system of claim 18 , wherein the computing device is further configured to:

detect that the combined power/data connection between the computing device and the power source is disconnected;

reconnect the combined power/data connection between the computing device and the power source;

provide the reauthentication token to the power source to enable the computing device to reauthenticate the verified identity to the power source; and

receive power at the computing device from the power source over the combined power/data connection.

20. The system of claim 19 , wherein the power source is configured to provide power to the computing device over the combined power/data connection after the combined power/data connection has been reconnected to the power source at a power level received that corresponds to a requested power level indicated in the authentication response.

21. The system of claim 19 , wherein the computing device authenticates the power source before providing the reauthentication token to the power source.

22. The system of claim 21 , wherein the computing device authenticates the power source by:

obtaining a timestamp signed by a private key associated with the power source; and

verifying the time stamp with a public key associated with the power source.

23. The system of claim 19 , wherein a power level received over the combined power/data connection after it has been reconnected corresponds to a requested power level provided with the reauthentication token.

24. The system of claim 18 , wherein the computing device is further configured to:

establish a mutually authenticated secure communication channel between the computing device and the power source; and

obtain a reauthentication token from the power source.

25. The system of claim 18 , further comprising an authentication server in communication with the power source, the authentication server configured to authorize the verified identity associated with the computing device to receive power from the power source.

26. The system of claim 18 , wherein the computing device determines a first amount of power consumed by the computing device during a predetermined time period, and provides to the power source an indication of the first amount of power.

Assignments (1)

Continuity (2)

References Cited (51)