公开(公告)号：US11570009B1

公开(公告)日：2023-01-31

申请号：US16693066

申请日：2019-11-22

Applicant: Amazon Technologies, Inc.

Inventor： Ranganath Mallipeddu ,  Yangfan Zhang ,  Nicholas A. Gochenaur ,  William Alex Stevenson ,  Lomash Kumar

IPC: H04L9/32 ,  H04L67/141 ,  H04L67/12 ,  H04L67/60

Abstract: A device management service to facilitate onboarding of a remote IoT device may receive, from a client service, a request for a session certificate for a remote device. The device management service may send the session certificate to the client service, where the session certificate is valid for the remote device to obtain a primary certificate during a session duration. The device management service may receive, from the remote device, a request for the primary certificate for the remote device. The device management service may send, to the remote device, the primary certificate, wherein the primary certificate enables communication between the remote device and the device management service, and wherein the primary certificate has a primary duration that is longer than the session duration. The device management service may establish a communication channel with the remote device according to the primary certificate.

公开(公告)号：US11343676B1

公开(公告)日：2022-05-24

申请号：US16296107

申请日：2019-03-07

Applicant: Amazon Technologies, Inc.

Inventor： Yangfan Zhang

IPC: H04W12/069 ,  H04L41/0806 ,  H04W12/04 ,  H04W12/06

Abstract: A technology is described for connecting an unconfigured device to a wireless network using network credentials obtained via a configurator device. An example of the technology may include activating a configurator service on a device to allow the device to act as a configurator device and provide network credentials of a wireless network to unconfigured devices. The configurator device may receive a connection request from an unconfigured device to obtain the network credentials to enable the unconfigured device to connect to the wireless network. The configurator device may determine that the unconfigured device is authorized to connect to the wireless network, obtain the network credentials from a credential provisioning service, and send the network credentials to the unconfigured device to enable the unconfigured device to connect to the wireless network.