DEVICE-SPECIFIC IDENTITY

• US 20090300168A1
• Filed: 06/02/2008
• Published: 12/03/2009
• Est. Priority Date: 06/02/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Rouskov, Yordan, Chen, Rui, Guo, Wei-Qiang (Michael), Rajvanshy, Vikas, De, Vaishali
• Granted Patent: US 8,209,394 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A device identifier (ID) is used across enterprise boundaries. A user can use the device ID to publish a device for sharing with other remote users. The remote users can discover devices that are shared by other users based on device IDs, connect to a selected device, and then verify that they have connected to the correct device based on its device ID. An account authority service may be used to manage the publication and/or discovery of the shared devices and their device IDs.

Claims

1. A method of accessing a user device from a remote device within an account network, the method comprising:

receiving from an account authority service an indication of one or more shareable devices of a specified user, the user device being one of the shareable devices of the specified user;

receiving from the account authority service a device identifier of the user device;

receiving from the user device a device certificate including the device identifier of the user device;

confirming that the device identifier received from the account authority service matches the device identifier received in the device certificate.

2. The method of claim 1 further comprising:

providing a request to the account authority service requesting the indication of one or more shareable devices of the specified user, the request identifying the specified user.

3. The method of claim 1 further comprising:

identifying to the account authority service a selection of the user device from the indication of the one or more shareable devices, responsive to the operation of receiving the indication of one or more shareable devices and prior to the operation of receiving a device identifier.

4. The method of claim 1 further comprising:

establishing communications between the remote device and the shareable device, prior to the operation of receiving the device certificate.

5. The method of claim 1 wherein the one or more shareable devices of the specified user are identified to the account authority service by the specified user.

6. The method of claim 1 wherein one or more device identifiers of the one or more shareable devices are identified to the account authority service by the specific user.

7. The method of claim 1 wherein the device identifier of the user device is generated by the user device in combination with a device password.

8. The method of claim 1 wherein the device certificate is signed and further comprising:

confirming that the device certificate received from the user device is signed by the account authority service.

9. A computer-readable storage medium having computer-executable instructions for performing a computer process that accesses a user device from a remote device within an account network, the computer process comprising:

receiving from an account authority service an indication of one or more shareable devices of a specified user, the user device being one of the shareable devices of the specified user;

identifying to the account authority service a selection of the user device from the indication of the one or more shareable devices;

receiving from the account authority service a device identifier of the user device;

receiving from the user device a device certificate including the device identifier of the user device;

confirming that the device identifier received from the account authority service matches the device identifier received in the device certificate.

10. The computer-readable storage medium of claim 9 wherein the computer process further comprises:

providing a request to the account authority service requesting the indication of one or more shareable devices of the specified user, the request identifying the specified user.

11. The computer-readable storage medium of claim 9 wherein the computer process further comprises:

establishing communications between the remote device and the shareable device, prior to the operation of receiving the device certificate.

12. The computer-readable storage medium of claim 9 wherein the one or more shareable devices of the specified user are identified to the account authority service by the specified user.

13. The computer-readable storage medium of claim 9 wherein one or more device identifiers of the one or more shareable devices are identified to the account authority service by the specific user.

14. The computer-readable storage medium of claim 9 wherein the device identifier of the user device is generated by the user device in combination with a device password.

15. The computer-readable storage medium of claim 9 wherein the device certificate is signed and further comprising:

confirming that the device certificate received from the user device is signed by the account authority service.

16. A method of accessing a user device from a remote device within an account network, the method comprising:

receiving from an account authority service a device identifier of the user device;

receiving from the user device a device certificate signed by the account authority service and including the device identifier of the user device;

determining whether the device identifier received from the account authority service matches the device identifier received in the device certificate;

establishing communications between the user device and the remote device if the device identifier received from the account authority service matches the device identifier received in the device certificate.

17. The method of claim 16 further comprising:

providing a request to the account authority service requesting the indication of one or more shareable devices of the specified user, the request identifying the specified user.

18. The method of claim 16 wherein one or more device identifiers of the one or more shareable devices are identified to the account authority service by the specific user.

19. The method of claim 16 further comprising:

transmitting from the remote device to the user device a security token as evidence of identity of the remote device.

20. The method of claim 16 wherein the device certificate is signed and further comprising:

confirming that the device certificate received from the user device is signed by the account authority service.