Registry apparatus, agent device, application providing apparatus and corresponding methods

• US 10,069,811 B2
• Filed: 10/17/2013
• Issued: 09/04/2018
• Est. Priority Date: 10/17/2013
• Status: Active Grant

• Current Assignee: Arm IP Limited
• Original Assignee: Arm IP Limited
• Inventors: Curtis, William Allen, Anson, Douglas Miles, Balanza, Kerry McGuire
• Primary Examiner(s): Kim, Tae K
• Application Number:
  US14/056,423
• Publication Number:
  US 20150113599A1
• Time in Patent Office: 1,783 Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A registry apparatus is provided for maintaining a device registry of agent devices for communicating with application providing apparatus. The registry comprises authentication information for uniquely authenticating at least one trusted agent device. In response to an authentication request from an agent device, the authentication information for that device is obtained from the registry, and authentication of the agent device is performed. If the authentication is successful, then application key information is transmitted to at least one of the agent device and the application providing apparatus.

Claims

1. A method for a registry apparatus to establish secure communication between an agent device and an application providing apparatus, said application providing apparatus configured to execute an application program using data gathered from the agent device and issue commands for controlling the agent device, and wherein the registry apparatus maintains a device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device;

the method comprising steps of;

(a) receiving, at the registry apparatus, from the agent device an authentication request specifying the device identifier of the agent device;

(b) obtaining from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request;

(c) performing authentication of the agent device using the authentication information obtained from the device registry;

(d) receiving, at the registry apparatus, from the application providing apparatus with which the agent device is to perform the secure communication, an application association request, generated at the application providing apparatus, the application association request specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device in the device registry;

(e) registering the application identifier in the device registry entry of the agent device having the device identifier specified by the application association request; and

(f) if the authentication is successful, transmitting to at least one of the agent device and the application providing apparatus application key information for performing the secure communication between the agent device and the application providing apparatus.

2. The method according to claim 1, wherein if the authentication is successful, the transmitting step transmits the application key information to both the agent device and the application providing apparatus.

3. The method according to claim 1, wherein if the authentication is successful, the device identifier of the agent device is transmitted to the application providing apparatus.

4. The method according to claim 1, comprising a step of performing authentication between the registry apparatus and the application providing apparatus.

5. The method according to claim 1, wherein the application key information is transmitted to at least one application providing apparatus identified in the device registry entry as an application providing apparatus with which the agent device is to perform the secure communication.

6. The method according to claim 1, wherein the authentication information comprises key information for authenticating a message received from the agent device.

7. The method according to claim 1, wherein the authentication comprises mutual authentication between the agent device and the registry apparatus.

8. A registry apparatus for establishing secure communication between an agent device and an application providing apparatus, said application providing apparatus configured to execute an application program using data gathered from the agent device and issue commands for controlling the agent device, the registry apparatus comprising:

storage circuitry configured to store a device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device;

communication circuitry configured to receive, at the registry apparatus, from the agent device an authentication request specifying the device identifier of the agent device, and to receive, at the registry apparatus, from the application providing apparatus with which the agent device is to perform the secure communication, an application association request, generated at the application providing apparatus, the application association request specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device in the device registry; and

processing circuitry configured to obtain from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request, to perform authentication of the agent device using the authentication information obtained from the device registry and to register the application identifier in the device registry entry of the agent device having the device identifier specified by the application association request;

wherein if the authentication is successful, then the communication circuitry is configured to transmit to at least one of the agent device and the application providing apparatus application key information for performing the secure communication between the agent device and the application providing apparatus.

9. A registry apparatus for establishing secure communication between an agent device and an application providing apparatus, said application providing apparatus configured to execute an application program using data gathered from the agent device and issue commands for controlling the agent device, the registry apparatus comprising:

storage means for storing a device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device;

communication means for receiving, at the registry apparatus, from the agent device an authentication request specifying the device identifier of the agent device and for receiving, at the registry apparatus, from the application providing apparatus with which the agent device is to perform the secure communication, an application association request, generated at the application providing apparatus, the application association request specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device in the device registry; and

processing means for obtaining from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request, performing authentication of the agent device using the authentication information obtained from the device registry, and registering the application identifier in the device registry entry of the agent device having the device identifier specified by the application association request;

wherein if the authentication is successful, then the communication means is configured to transmit to at least one of the agent device and the application providing apparatus application key information for performing the secure communication between the agent device and the application providing apparatus.

10. A method for an agent device to establish secure communication with an application providing apparatus using a registry apparatus for maintaining a device registry of agent devices, the device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device, wherein said application providing apparatus is configured to execute an application program using data gathered from the agent device and issues commands for controlling the agent device, and wherein the agent device is configured to store the device identifier of the agent device and the authentication information for uniquely authenticating the agent device;

the method comprising steps of;

(a) transmitting to the registry apparatus, from the agent device, an authentication request specifying the device identifier of the agent device;

(b) performing authentication with the registry apparatus using the authentication information stored by the agent device;

(c) receiving, at the registry apparatus, from the application providing apparatus with which the agent device is to perform the secure communication, an application association request, generated at the application providing apparatus, the application association request specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device in the device registry;

(d) registering the application identifier in the device registry entry of the agent device having the device identifier specified by the application association request; and

(d) if the authentication is successful, receiving application key information from the registry apparatus, and performing the secure communication with the application providing apparatus having the application identifier using the application key information.

11. The method according to claim 10, wherein the authentication request is transmitted to the registry apparatus automatically in response to activation of the agent device.

12. The method according to claim 10, wherein the authentication request is transmitted to the registry apparatus automatically without user interaction.

13. The method according to claim 10, wherein the authentication comprises mutual authentication between the registry apparatus and the agent device using the authentication information and registry authentication information for authenticating the registry apparatus.

14. The method according to claim 10, wherein the authentication information is stored in a protected region of the agent device.

15. The method according to claim 10, wherein the secure communication comprises direct communication between the agent device and the application providing apparatus without communication via the registry apparatus.

16. The method according to claim 10, wherein the secure communication comprises an encrypted communication encrypted using the application key information.

17. The method according to claim 10, wherein the agent device is configured to store a registry address identifying the registry apparatus, and to transmit the authentication request to the registry apparatus identified by the registry address.

18. A method for an application providing apparatus to establish secure communication with an agent device using a registry apparatus for maintaining a device registry of agent devices, the device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device, the method comprising:

(a) the application providing apparatus generating an application association request specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device with which the application providing apparatus is to perform the secure communication, in the device registry;

(b) the application providing apparatus transmitting to the registry apparatus the application association request;

(d) the application providing apparatus receiving from the registry apparatus application key information for performing the secure communication with the agent device associated with the device identifier, following the registry apparatus receiving from the agent device an authentication request specifying the device identifier of the agent device, obtaining from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request and performing authentication of the agent device using the authentication information obtained from the device registry; and

(e) the application providing apparatus performing the secure communication with the agent device identified by the device identifier using the application key information.

19. The method according to claim 18, comprising a step of performing authentication between the application providing apparatus and the registry apparatus.

20. The method according to claim 18, comprising a step of the application providing apparatus receiving a device association request specifying a device identifier of a specified agent device and a user identifier of a user to be associated with the specified agent device.

21. The method according to claim 20, wherein the application association request requesting that the specified agent device specified in the device association request is registered in the device registry as an agent device for performing the secure communication with the application providing apparatus.

22. The method according to claim 18, wherein the secure communication comprises direct communication between the agent device and the application providing apparatus without communication via the registry apparatus.

23. The method according to claim 18, wherein the secure communication comprises an encrypted communication encrypted using the application key information.

24. The method according to claim 18, comprising a step of the application providing apparatus executing an application program using data received in the secure communication from the agent device.

25. An application providing apparatus for establishing secure communication with an agent device using a registry apparatus for maintaining a device registry of agent devices, the device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device, the application providing apparatus comprising:

communication circuitry configured to transmit to the registry apparatus, from the application providing apparatus, an application association request, generated at the application providing apparatus and specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device with which the application providing apparatus is to perform the secure communication, in the device registry, and configured to receive from the registry apparatus application key information for performing the secure communication with the agent device associated with the device identifier, following following the registry apparatus receiving from the agent device an authentication request specifying the device identifier of the agent device, obtaining from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request and performing authentication of the agent device using the authentication information obtained from the device registry; and

wherein the communication circuitry is configured to perform the secure communication with the agent device identified by the device identifier using the application key information received from the registry apparatus.

26. An application providing apparatus for establishing secure communication with an agent device using a registry apparatus for maintaining a device registry of agent devices, the device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device, the application providing apparatus comprising:

communication means for transmitting to the registry apparatus, from the application providing apparatus, an application association request, generated at the application providing apparatus and specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device with which the application providing apparatus is to perform the secure communication, in the device registry, and receiving from the registry apparatus application key information for performing the secure communication with the agent device associated with the device identifier, following the registry apparatus receiving from the agent device an authentication request specifying the device identifier of the agent device, obtaining from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request and performing authentication of the agent device using the authentication information obtained from the device registry; and

wherein the communication means is configured to perform the secure communication with the agent device identified by the device identifier using the application key information received from the registry apparatus.

27. A method for establishing secure communication between an agent device and an application providing apparatus using a registry apparatus which maintains a device registry comprising a device registry entry for the agent device, the device registry entry comprising authentication information for uniquely authenticating the agent device associated with a device identifier of the agent device;

the method comprising steps of;

(a) transmitting an authentication request from the agent device to the registry apparatus, the authentication request specifying the device identifier of the agent device;

(b) obtaining from the device registry the authentication information for the agent device identified by the device identifier specified by the authentication request;

(c) performing authentication of the agent device using the authentication information obtained from the device registry, said authentication comprising the registry apparatus checking the identity of the agent device and verifying that the agent device is trusted;

(d)

transmitting an application association request, generated at the application providing apparatus, from the application providing apparatus with which the agent device is to perform the secure communication, to the registry apparatus, the application association request specifying that an application identifier of the application providing apparatus be associated with the device identifier of the agent device in the device registry;

(e) registering the application identifier in the device registry entry for the agent device having the device identifier specified by the application association request; and

(f) if the authentication is successful, transmitting application key information from the registry apparatus to at least one of the agent device and the application providing apparatus, and performing the secure communication between the agent device and the application providing apparatus using the application key information.