公开(公告)号：US11570009B1

公开(公告)日：2023-01-31

申请号：US16693066

申请日：2019-11-22

Applicant: Amazon Technologies, Inc.

Inventor： Ranganath Mallipeddu ,  Yangfan Zhang ,  Nicholas A. Gochenaur ,  William Alex Stevenson ,  Lomash Kumar

IPC: H04L9/32 ,  H04L67/141 ,  H04L67/12 ,  H04L67/60

Abstract: A device management service to facilitate onboarding of a remote IoT device may receive, from a client service, a request for a session certificate for a remote device. The device management service may send the session certificate to the client service, where the session certificate is valid for the remote device to obtain a primary certificate during a session duration. The device management service may receive, from the remote device, a request for the primary certificate for the remote device. The device management service may send, to the remote device, the primary certificate, wherein the primary certificate enables communication between the remote device and the device management service, and wherein the primary certificate has a primary duration that is longer than the session duration. The device management service may establish a communication channel with the remote device according to the primary certificate.