DEVICES, SYSTEMS, AND METHODS FOR DEVICE PROVISIONING

• US 20150215297A1
• Filed: 01/27/2014
• Published: 07/30/2015
• Est. Priority Date: 01/27/2014
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Bajo, Allison, Torii, Minoru, Rathod, Hari
• Granted Patent: US 9,160,724 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

Systems, devices, and methods for provisioning a device receive authentication information from a user interface; send the authentication information to an identity provider device; receive a token at the registration device from the identify provider device; send the token, device information of a new device, and a provisioning request from the registration device to a provisioning service; receive an activation code at a user interface of the new device; send the activation code and the token from the new device to the provisioning device; and receive a key from the provisioning device, the key being associated with the device identifier of the new device.

Claims

1. A method for provisioning a device, the method comprising:

at a registration device, receiving authentication information from a user interface, wherein the authentication information corresponds to a user;

sending the authentication information from the registration device to an identity provider device;

receiving a token at the registration device from the identify provider device, wherein the token corresponds to the user;

sending the token, device information of a new device, and a provisioning request from the registration device to a provisioning service;

at a user interface of the new device, receiving an activation code;

sending the activation code and the token from the new device to the provisioning device; and

at the new device, receiving a key from the provisioning device, wherein the key is associated with the device identifier of the new device.

2. The method of claim 1, further comprising:

generating the activation code based on the token; and

sending the activation code and the token to the registration device.

3. The method of claim 1, wherein the device information of the new device includes one or more of device name, device location, device IP address, device model, device serial number, device manufacturer.

4. The method of claim 1, wherein the registration device is the new device.

5. The method of claim 1, wherein the activate code has a predetermined life span, and wherein the method further comprises:

determining if the provisioning device has received the activation code from the new device before the end of the predetermined life span of the activation code.

6. The method of claim 1, further comprising sending the user token from the new device to the provisioning device.

7. The method of claim 1, further comprising sending the activation code and the token from the provisioning device to the registration device.

8. One or more computer-readable media storing instructions that, when executed by one or more computing devices, cause the one or more computing devices to perform operations comprising:

at a registration device, receiving authentication information from a user interface, wherein the authentication information corresponds to a user;

sending the authentication information from the registration device to an identity provider device;

receiving a token at the registration device from the identify provider device, wherein the token corresponds to the user;

sending the token, device information of a new device, and a first provisioning request from the registration device to a provisioning service;

at a user interface of the new device, receiving an activation code;

sending the activation code and the token from the new device to the provisioning device; and

at the new device, receiving a key from the provisioning device, wherein the key is associated with the device identifier of the new device.

9. The one or more computer-readable media of claim 8, wherein the operations further comprise:

at the provisioning service,

receiving a second provisioning request for the new device,

generating a second activation code for the new device,

sending the second activation code for the new device to a computing device, and

invalidating an activation code associated with the first provisioning request.

10. The one or more computer-readable media of claim 8, wherein the user interface of the new device is displayed on the registration device.

11. The one or more computer-readable media of claim 8, wherein the operations further comprise:

sending the new device information, new device tenant ID, new device configuration, new device applications, and new device data from the new device to the provisioning service;

12. The one or more computer-readable media of claim 11, wherein the operations further comprise signing the new device information, new device configuration, new device applications, and new device data using the API key and API secret.

13. The one or more computer-readable media of claim 11, wherein the operations further comprise:

sending the new device tenant ID from a replacement device to the provisioning service;

sending the new device information, the new device configuration, the new device applications, and the new device data from the provisioning service to the replacement device; and

configuring the replacement device according to the new device information, the new device configuration, the new device applications, and the new device data.

14. A system for provisioning a device, the system comprising:

one or more computer-readable media;

one or more communication interfaces; and

one or more processors configured to cause the system to

receive authentication information from a user interface at a registration device, wherein the authentication information corresponds to a user;

send the authentication information from the registration device to an identity provider device;

receive a token at the registration device from the identify provider device, wherein the token corresponds to the user;

send the token, device information of a new device, and a provisioning request from the registration device to a provisioning service;

at a user interface of the new device, receive an activation code;

send the activation code from the new device to the provisioning device; and

at the new device, receive a key from the provisioning device, wherein the key is associated with the device identifier of the new device.