Devices, systems, and methods for device provisioning

• US 9,160,724 B2
• Filed: 01/27/2014
• Issued: 10/13/2015
• Est. Priority Date: 01/27/2014
• Status: Expired due to Fees

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Rathod, Hari, Bajo, Allison, Torii, Minoru
• Primary Examiner(s): DADA, BEEMNET W
• Application Number:
  US14/165,046
• Publication Number:
  US 20150215297A1
• Time in Patent Office: 624 Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

Systems, devices, and methods for provisioning a device receive authentication information from a user interface; send the authentication information to an identity provider device; receive a token at the registration device from the identify provider device; send the token, device information of a new device, and a provisioning request from the registration device to a provisioning service; receive an activation code at a user interface of the new device; send the activation code and the token from the new device to the provisioning device; and receive a key from the provisioning device, the key being associated with the device identifier of the new device.

Claims

1. A method for provisioning a device, the method comprising:

at a registration device, receiving authentication information from a user interface, wherein the authentication information corresponds to a user;

sending the authentication information from the registration device to an identity provider device;

receiving a token at the registration device from the identify provider device, wherein the token corresponds to the user;

sending the token, new device information, and a first provisioning request from the registration device to a provisioning device;

at a user interface of the new device, receiving an activation code;

sending the activation code and the token from the user interface of the new device to the provisioning device;

at the new device, receiving a key from the provisioning device, wherein the key is associated with a device identifier of the new device;

signing the new device information, a new device configuration, new device applications, and new device data using the key and an API secret, thereby generating signed device information; and

sending the device identifier and the signed device information from the new device to the provisioning device.

2. The method of claim 1, further comprising:

generating the activation code based on the token; and

sending the activation code and the token to the registration device.

3. The method of claim 1, wherein the new device information includes one or more of a device name, a device location, a device IP address, a device model, a device serial number, and a device manufacturer.

4. The method of claim 1, wherein the registration device is the new device.

5. The method of claim 1, wherein the activation code has a predetermined life span, and wherein the method further comprises:

determining if the provisioning device has received the activation code from the new device before the end of the predetermined life span of the activation code.

6. The method of claim 1, further comprising,

at the provisioning device,

receiving a second provisioning request for the new device,

generating a second activation code for the new device,

sending the second activation code for the new device to a computing device, and

invalidating the activation code associated with the first provisioning request.

7. The method of claim 1, further comprising sending the activation code and the token from the provisioning device to the registration device.

8. One or more computer-readable storage media storing instructions that, when executed by one or more computing devices, cause the one or more computing devices to perform operations comprising:

at a registration device, receiving authentication information from a user interface, wherein the authentication information corresponds to a user;

sending the authentication information from the registration device to an identity provider device;

receiving a token at the registration device from the identify provider device, wherein the token corresponds to the user;

sending the token, new device information of a new device, and a first provisioning request from the registration device to a provisioning service;

at the provisioning service,

generating a first activation code for the new device,

receiving a second provisioning request for the new device,

generating a second activation code for the new device,

sending the second activation code for the new device to a computing device, and

invalidating the first activation code for the new device;

at a user interface of the new device, receiving the second activation code;

sending the second activation code and the token from the user interface of the new device to the provisioning service; and

at the new device, receiving a key from the provisioning service, wherein the key is associated with a device identifier of the new device.

9. The one or more computer-readable storage media of claim 8, wherein the user interface of the new device is displayed on the registration device.

10. The one or more computer-readable storage media of claim 8, wherein the device identifier of the new device is a new device tenant ID, and

wherein the operations further comprise sending the new device information, a new device tenant ID, a new device configuration, new device applications, and new device data from the new device to the provisioning service.

11. The one or more computer-readable storage media of claim 10, wherein the key is an API key, and

wherein the operations further comprise signing the new device information, the new device configuration, the new device applications, and the new device data using the API key and an API secret.

12. The one or more computer-readable storage media of claim 10, wherein the operations further comprise:

sending the new device tenant ID from a replacement device to the provisioning service;

sending the new device information, the new device configuration, the new device applications, and the new device data from the provisioning service to the replacement device; and

configuring the replacement device according to the new device information, the new device configuration, the new device applications, and the new device data.

13. A system for provisioning a device, the system comprising:

one or more computer-readable media;

one or more communication interfaces; and

one or more processors that are configured to cause the system to

receive authentication information from a user interface at a registration device, wherein the authentication information corresponds to a user;

send the authentication information from the registration device to an identity provider device;

receive a token at the registration device from the identify provider device, wherein the token corresponds to the user;

send the token, new device information, and a provisioning request from the registration device to a provisioning service;

at a user interface of the new device, receive an activation code;

send the activation code from the user interface of the new device to the provisioning device;

at the new device, receive a key from the provisioning device, wherein the key is associated with a device identifier of the new device;

sign the new device information, a new device configuration, new device applications, and new device data using the key and an API secret, thereby generating signed device information; and

send the new device identifier and the signed device information from the new device to the provisioning device.