[특허]Device enrollment in a cloud service using an authenticated application

General Electric Company

검색어에 아래의 연산자를 사용하시면 더 정확한 검색결과를 얻을 수 있습니다.
검색연산자

검색도움말
검색연산자	기능	검색시 예
()	우선순위가 가장 높은 연산자	예1) (나노 (기계 \| machine))
공백	두 개의 검색어(식)을 모두 포함하고 있는 문서 검색	예1) (나노 기계) 예2) 나노 장영실
\|	두 개의 검색어(식) 중 하나 이상 포함하고 있는 문서 검색	예1) (줄기세포 \| 면역) 예2) 줄기세포 \| 장영실
!	NOT 이후에 있는 검색어가 포함된 문서는 제외	예1) (황금 !백금) 예2) !image
*	검색어의 *란에 0개 이상의 임의의 문자가 포함된 문서 검색	예) semi*
""	따옴표 내의 구문과 완전히 일치하는 문서만 검색	예) "Transform and Quantization"

과학기술 지식인프라 ScienceON

연합인증

연합인증 가입 기관의 연구자들은 소속기관의 인증정보(ID와 암호)를 이용해 다른 대학, 연구기관, 서비스 공급자의 다양한 온라인 자원과 연구 데이터를 이용할 수 있습니다.

이는 여행자가 자국에서 발행 받은 여권으로 세계 각국을 자유롭게 여행할 수 있는 것과 같습니다.

연합인증으로 이용이 가능한 서비스는 NTIS, DataON, Edison 등이 있습니다.

한번의 인증절차만으로 연합인증 가입 서비스에 추가 로그인 없이 이용이 가능합니다.

다만, 연합인증을 위해서는 최초 1회만 인증 절차가 필요합니다. (회원이 아닐 경우 회원 가입이 필요합니다.)

연합인증 절차는 다음과 같습니다.

최초이용시에는
ScienceON에 로그인 → 연합인증 서비스 접속 → 로그인 (본인 확인 또는 회원가입) → 서비스 이용

그 이후에는
ScienceON 로그인 → 연합인증 서비스 접속 → 서비스 이용

연합인증을 활용하시면 KISTI가 제공하는 다양한 서비스를 편리하게 이용하실 수 있습니다.

특허 상세정보

MyON담기

내보내기 페이스북 공유 트위터 공유 카카오톡 공유

Device enrollment in a cloud service using an authenticated application

특허상세정보
국가/구분	United States(US) Patent 등록
국제특허분류(IPC7판)	G06F-007/04 G05B-019/418 H04L-029/06 H04L-029/08 G06F-003/0482 G06F-003/0484 G06F-003/0488 H04L-012/24 H04L-012/26 G06Q-010/04 G06Q-010/06
출원번호	US-0094737 (2016-04-08)
등록번호	US-10156842 (2018-12-18)
발명자 / 주소	Wu, Jiaqi Lammers, Greg
출원인 / 주소	General Electric Company
대리인 / 주소	Fitch, Even, Tabin & Flannery LLP
인용정보	피인용 횟수 : 0 인용 특허 : 125

초록
▼

In various example embodiments, systems and methods for administering machine access to a cloud service are presented. An edge manager device in a cloud computing environment can establish a first client for a first application that is executed externally to the cloud computing environment. The edge manager device can provide a first request via a first network to an authorization service application to obtain client identification and client secret information for use by the first client. The edge manager device can receive the client identification and client secret information from the authorization service application via the first network. The client identification and client secret information can be selected by the authorization service application to permit later data access to the edge manager device by the first client. The edge manager device can provide the client identification and client secret information to the first client via a second network.

대표
청구항
▼

1. A method for negotiating machine access to a cloud-based application using an edge manager device; the method comprising: establishing, at an edge manager device in a cloud computing environment, a first client corresponding to a first application that is executed externally to the cloud computing environment, the first application configured to register identification information about one or more external devices with the edge manager device using the first client, to permit later data access to the edge manager device by the one or more external devices;using the edge manager device, providing a first request via a first network to an authorization service application to obtain client identification and client secret information for use by the first client;receiving the client identification and client secret information at the edge manager device from the authorization service application via the first network, wherein the client identification and client secret information are selected by the authorization service application to permit later data access to the edge manager device by the first client; andusing the edge manager device, providing the client identification and client secret information to the first client via a second network. 2. The method of claim 1, further comprising receiving, at the edge manager device and from the first client via the third network, a request to pre-register a first external device with the edge manager device, the request including first device identification information for the first external device. 3. The method of claim 2, further comprising using the edge manager device, updating a cloud-based device registry database to include the first device identification information for the first external device. 4. The method of claim 3, further comprising receiving, at the edge manager device and via a third network, the first device identification information and a certificate signing request (CSR) from the first external device. 5. The method of claim 4, wherein the receiving the first device identification information and the CSR from the first external device includes receiving a JSON web token from the first external device. 6. The method of claim 4, wherein the receiving the first device identification information and the CSR from the first external device further includes receiving at least one of a MAC address, IP address, OS version, or BIOS version corresponding to the first external device. 7. The method of claim 4, further comprising: using the edge manager device, establishing credential data for use by the first external device to access a first cloud-based application; andusing the edge manager device, providing the credential data to the first external device via the third network. 8. The method of claim 7, wherein the establishing the credential data for use by the first external device includes, using the edge manager device, requesting device credential data from the authorization service application via the first network. 9. The method of claim 8, further comprising using the edge manager device, providing the CSR to a registration authority application via the first network and, in return, receiving a signed certificate at the edge manager device. 10. The method of claim 9, further comprising using the edge manager device, providing the signed certificate to the first external device via the third network. 11. The method of claim 8, further comprising receiving, at the edge manager device and in response to the requesting the device credential data, an OAuth2 token for use by the first external device to establish a secure data communication link between the first external device and the first cloud-based application. 12. The method of claim 11, further comprising using the edge manager device, providing the OAuth2 token to the first external device. 13. The method of claim 1, further comprising receiving, at the edge manager device and from the first client via the second network, one or more requests to pre-register a plurality of external devices with the edge manager device, the one or more requests including respective device identification information for each of the plurality of external devices; and using the edge manager device, adding the respective device information for each of plurality of external devices to a cloud-based device registry database. 14. The method of claim 13, further comprising: receiving, at the edge manager device via a third network, a device enrollment request from a first external device of the plurality of external devices, the device enrollment request including first device identification information corresponding to the first external device; andusing the edge manager device, querying the cloud-based device registry database to determine whether the first external device is pre-registered with the edge manager device. 15. The method of claim 14, further comprising using the edge manager device to obtain, from the authorization service application, device-specific identification and secret information for use by the first external device to access a cloud-based application service. 16. The method of claim 13, further comprising: receiving, at the edge manager device via a third network, a device enrollment request from a first external device other than the plurality of external devices, the device enrollment request including first device identification information corresponding to the first external device; andusing the edge manager device, returning a denial of access indication to the first external device when the first device identification information does not correspond to the device identification information for any one of the plurality of external devices. 17. A method for administering machine access to a cloud service application, the method comprising: using an authenticated application outside of a cloud environment, assigning first identification information for use by a first machine, including providing the first identification information to the first machine and to a cloud-based enrollment service application via separate networks;receiving, via a network and at the enrollment service application, an enrollment request from the first machine, the enrollment request including the assigned first identification information corresponding to the first machine; anddetermining, using the enrollment service application, whether the received first identification information corresponds to valid identification information based on a comparison of the received first identification information and previously-known valid identification information, wherein when the received first identification information is determined to correspond to the previously-known valid identification information, returning a certificate from the enrollment service application to the first machine, the certificate for use by the first machine to obtain data access to one or more cloud-based applications. 18. The method of claim 17, further comprising enrolling the authenticated application with a cloud service, including using the enrollment service application to provide credential data to the authenticated application, the credential data configured to permit the authenticated application data access to one or more cloud-based applications. 19. The method of claim 17, further comprising using the first machine, generating a certificate signing request (CSR) and providing the CSR and the first identification information from the first machine to the cloud-based enrollment service application via a network. 20. A method for using a device-based authentication certificate to obtain data access to a cloud-based destination application, the method comprising: using an edge manager device, receiving, via a first network, a first token and first data access request from a first machine wherein the first machine is outside of the cloud, the edge manager device configured to administer data access for the first machine to one or more cloud-based applications;using the edge manager device, querying a device registry database via a second network to determine whether an authentication certificate associated with the first token is previously known to correspond with the first machine;receiving an indication via the second network whether the authentication certificate is previously known to correspond with the first machine and, when the authentication certificate is previously known to correspond with the first machine, using the edge manager device, providing the first token and information about the first machine from the edge manager device to a cloud-based authorization service application via a third network;using the cloud-based authorization service application, verifying the first token against a cloud-based device registry, generating an OAuth2 token for use by the first machine when the first token is verified, and providing the OAuth2 token to the edge manager device via the third network; andusing the edge manager device, providing the OAuth2 token to the first machine via the first network.

이 특허에 인용된 특허 (125)

IPC 상위 출원인

내보내기

상세정보
내보내기 구분	파일저장 인쇄 메일전송
구성항목	관리번호, 국가코드, 자료구분, 상태, 출원번호, 출원일자, 공개번호, 공개일자, 등록번호, 등록일자, 발명명칭(한글), 발명명칭(영문), 출원인(한글), 출원인(영문), 출원인코드, 대표IPC 관리번호, 국가코드, 자료구분, 상태, 출원번호, 출원일자, 공개번호, 공개일자, 공고번호, 공고일자, 등록번호, 등록일자, 발명명칭(한글), 발명명칭(영문), 출원인(한글), 출원인(영문), 출원인코드, 대표출원인, 출원인국적, 출원인주소, 발명자, 발명자E, 발명자코드, 발명자주소, 발명자 우편번호, 발명자국적, 대표IPC, IPC코드, 요약, 미국특허분류, 대리인주소, 대리인코드, 대리인(한글), 대리인(영문), 국제공개일자, 국제공개번호, 국제출원일자, 국제출원번호, 우선권, 우선권주장일, 우선권국가, 우선권출원번호, 원출원일자, 원출원번호, 지정국, Citing Patents, Cited Patents
저장형식	Text(ASCII format) Excel format PIAS분석(.xls)
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	> 총 건의 자료가 검색되었습니다. > 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) > 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. > 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) > 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오 > ~ > Text(ASCII format) Excel format

과학기술 지식인프라 ScienceON

ScienceON Chatbot

연합인증

특허 상세정보

Device enrollment in a cloud service using an authenticated application

초록
▼

대표
청구항
▼

이 특허에 인용된 특허 (125)

IPC 상위 출원인

과제정보

상세정보조회

원문조회

IPC 상세정보(version : 201201)

연구과제 성과물(0)

참여연구원의 다른 문헌(0)

처리중입니다.

잠시만 기다려주세요.

ScienceON Chatbot

연합인증

특허 상세정보

Device enrollment in a cloud service using an authenticated application

초록 ▼

대표청구항 ▼

이 특허에 인용된 특허 (125)

IPC 상위 출원인

과제정보

상세정보조회

원문조회

IPC 상세정보(version : 201201)

연구과제 성과물(0)

참여연구원의 다른 문헌(0)

처리중입니다.

잠시만 기다려주세요.

초록
▼

대표
청구항
▼