Granted Patent B2

US 11,381,558 · App. 16/656,738 · Granted Jul 5, 2022

Inventors: Rifaat Shekh-Yusef (Ottawa, CA); John A. Young (Buntingford, GB)

Assignee: Avaya Inc.

H04L63/0876G06F16/2379G06F16/245H04L63/102

Abstract

Claims (59)

1. A method for providing a blockchain device enrollment service comprising:

creating, by a computer, an enrollment smart contract that controls access to the blockchain device enrollment service on a network by a device;

creating, by the computer, a pools smart contract associated with managing a plurality of different endpoints, wherein the pools smart contract is registered with the enrollment smart contract;

registering and configuring a manufacturer smart contract with the enrollment smart contract;

registering and configuring a service provider smart contract with the enrollment smart contract;

receiving, from the device, an enrollment request to enroll the device on the network, wherein the enrollment device includes an identification of the device and a signature;

determining whether the device is allowed access to the network based on a public key associated with the device and the received signature;

retrieving a configuration uniform resource locator from the pools smart contract based on the identification of the device;

sending the configuration uniform resource locator to the devices;

receiving, by the computer, a communication from the device for the enrollment smart contract upon a first-time boot of the device; and

authenticating, by the computer, the device based on the received communication.

2. The method of claim 1 , wherein the blockchain device enrollment service comprises a permissioned blockchain.

3. The method of claim 1 , wherein the enrollment smart contract is programmed into the device during manufacture.

4. The method of claim 1 , wherein the device is initially in an un-claimed state.

5. The method of claim 1 , wherein the identification of the device comprises at least a MAC address of the device.

6. The method of claim 1 , comprising:

receiving, by the computer, a claim request for the device from the service provider smart contract;

querying, by the computer, from the pools smart contract a status of the device;

creating, by the computer, credentials for the device; and

updating, by the computer, the pools smart contract with the credentials for the device.

7. The method of claim 6 , comprising:

returning, by the computer, the credentials to the service provider smart contract.

8. The method of claim 6 , wherein the status of the device comprises one of:

claimed or un-claimed.

9. The method of claim 1 , further comprising:

receiving, from the device, a nonce request, wherein the nonce request includes the identification of the device; and

sending a nonce to the device;

wherein: the signature is based on the nonce and a private key associated with the device; and

determining whether the device is allowed access to the network is further based on the nonce.

10. A system for providing a blockchain device enrollment service comprising:

a memory storing executable instructions; and

a processor in communication with the memory, the processor when executing the executable instructions is configured to:

create an enrollment smart contract that controls access to the blockchain device enrollment service by a device;

create a pools smart contract associated with managing a plurality of different endpoints, wherein the pools smart contract is registered with the enrollment smart contract;

register and configure a manufacturer smart contract with the enrollment smart contract;

register and configure a service provider smart contract with the enrollment smart contract;

receive, from the device, an enrollment request to enroll the device on the network, wherein the enrollment request includes an identification of the device and a signature;

determine whether the device is allowed access to the network based on a public key associated with the device and the received signature;

retrieve a configuration uniform resource locator from the pools smart contract based on the identification of the device;

send the configuration uniform resource locator to the device;

receive a communication from the device for the enrollment smart contract upon a first-time boot of the device; and

authenticate the device based on the received communication.

11. The system of claim 10 , wherein the blockchain device enrollment service comprises a permissioned blockchain.

12. The system of claim 10 , wherein the enrollment smart contract is programmed into the device during manufacture.

13. The system of claim 10 , wherein the device is initially in an un-claimed state.

14. The system of claim 10 , wherein the identification of the device comprises at least a MAC address of the device.

15. The system of claim 10 , wherein the processor when executing the executable instructions is configured to:

receive a claim request for the device from the service provider smart contract;

query the pools smart contract for a status of the device;

create credentials for the device; and

update the pools smart contract with the credentials for the device.

16. The system of claim 15 , wherein the processor when executing the executable instructions is configured to:

return the credentials to the service provider smart contract.

17. The system of claim 15 , wherein the status of the device comprises one of: claimed or un-claimed.

18. The system of claim 10 , wherein the processor when executing the executable instructions is configured to:

receive, from the device, a nonce request, wherein the nonce request includes the identification of the device; and

send a nonce to the device;

wherein: the signature is based on the nonce and a private key associated with the device; and

determining whether the device is allowed access to the network is further based on the nonce.

Assignments (8)

Continuity (1)