Systems and methods for managing device association

Patent metadata

Field	Value
Publication number	US-12531848-B2
Application number	US-202418623916-A
Country	US
Kind code	B2
Filing date	Apr 1, 2024
Priority date	Jul 17, 2017
Publication date	Jan 20, 2026
Grant date	Jan 20, 2026

Abstract

A method and system for managing device association and access is disclosed. Some embodiments may include receiving, from a user device, a request to access a network device. The request may include a public key of the user device. The request may include a digital certificate, wherein the digital certificate may include the public key of the user device. A distributed database address of the user device may be determined by applying a deterministic function to the public key of the user device. A distributed database entry may include the address of the user device. A distributed database entry may be generated. The distributed database entry may include the address of the user device. Based on the address of the user device, access to the network device may be granted to the user device.

First claim

What is claimed:

1 . A method comprising:
receiving, by a computing device and from a user device, a request to access a destination device, wherein the computing device has authority to grant access to the destination device, and wherein the request comprises a digital certificate comprising one or more unique identifiers of the user device; validating, based on the one or more unique identifiers of the user device, the digital certificate; generating a distributed database entry comprising an address of the destination device, an address of the user device, and a digital signature associated with the computing device; and transmitting, to the user device, a public key of the destination device and a locator of the destination device on a network, wherein the locator of the destination device comprises a network address of the destination device.

2 . The method of claim 1 , wherein the digital certificate comprises a public key of the user device.

3 . The method of claim 1 , further comprising determining, based on the digital certificate, the address of the user device.

4 . The method of claim 3 , wherein determining the address of the user device comprises applying at least a deterministic function to a public key of the user device.

5 . The method of claim 1 , wherein the generated distributed database entry comprises a blockchain transaction; and
wherein the generating the distributed database entry comprises transmitting the blockchain transaction to a blockchain network.

6 . The method of claim 1 , wherein the generated distributed database entry further comprises an indication of a time limit on access to the destination device.

7 . A computing device comprising:
one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the computing device to:
receive, from a user device, a request to access a destination device, wherein the computing device has authority to grant access to the destination device, and wherein the request comprises a digital certificate comprising one or more unique identifiers of the user device;
validate, based on the one or more unique identifiers of the user device, the digital certificate;
generate a distributed database entry comprising an address of the destination device, an address of the user device, and a digital signature associated with the computing device; and
transmit, to the user device, a public key of the destination device and a locator of the destination device on a network, wherein the locator of the destination device comprises a network address of the destination device.

8 . The computing device of claim 7 , wherein the digital certificate comprises a public key of the user device.

9 . The computing device of claim 7 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:
determine, based on the digital certificate, the address of the user device.

10 . The computing device of claim 9 , wherein the instructions which cause the computing device to determine the address of the user device, when executed by the one or more processors, further cause the computing device to:
apply at least a deterministic function to a public key of the user device.

11 . The computing device of claim 7 , wherein the generated distributed database entry comprises a blockchain transaction; and wherein the instructions which cause the computing device to generating the distributed database entry, when executed by the one or more processors, further cause the computing device to:
transmit the blockchain transaction to a blockchain network.

12 . The computing device of claim 7 , wherein the generated distributed database entry further comprises an indication of a time limit on access to the destination device.

13 . A method comprising:
transmitting, from a user device and to a computing device, a request to access a destination device, wherein the computing device has authority to grant access to the destination device, and wherein the request comprises a digital certificate comprising one or more unique identifiers of the user device; receiving, by the user device, a public key of the destination device and a locator of the destination device on a network, wherein the locator of the destination device comprises a network address of the destination device; and transmitting, by the user device to the destination device, and based on the locator of the destination device, a request to connect to the destination device, wherein the request to connect comprises the public key of the destination device and the digital certificate.

14 . The method of claim 13 , wherein the receiving the public key of the destination device and the locator of the destination device is based on a validation of the digital certificate.

15 . The method of claim 13 , further comprising generating a distributed database entry comprising an address of the destination device, an address of the user device, and a digital signature associated with the computing device.

16 . The method of claim 13 , further comprising receiving, by the user device and from the destination device, an indication of a grant of access to the destination device.

17 . The method of claim 16 , wherein the access to the destination device comprises control or use of a function of the destination device.

18 . The method of claim 13 , wherein the destination device comprises an Internet of Things (IoT) device.

19 . A first computing device comprising:
one or more processors; and memory storing instructions that, when executed by the one or more processors, cause the first computing device to: transmit, to a second computing device, a request to access a destination device, wherein the second computing device has authority to grant access to the destination device, and wherein the request comprises a digital certificate comprising one or more unique identifiers of the first computing device; receive a public key of the destination device and a locator of the destination device on a network, wherein the locator of the destination device comprises a network address of the destination device; and transmit, to the destination device, and based on the locator of the destination device, a request to connect to the destination device, wherein the request to connect comprises the public key of the destination device and the digital certificate.

20 . The first computing device of claim 19 , wherein the instructions, when executed by the one or more processors, further cause the first computing device to:
receive, from the destination device, an indication of a grant of access to the destination device.

21 . The first computing device of claim 20 , wherein the access to the destination device comprises control or use of a function of the destination device.

Assignees

• Comcast Cable Comm Llc

Inventors

• Haque Asad

Classifications

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• G06F16/27

  Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title