Device authentication within deployable computing environment

摘要

A deployable computing environment may facilitate interaction and data sharing between users and devices. Users, devices, and relationships between the users and devices may be represented within the deployable computing environment. A relationship between a user and a device may specify that the device is owned by the user and that the device is authorized to perform operations within the deployable computing environment on behalf of the user. Secure authentication of devices and users for interaction within the deployable computing environment is achieved by authenticating tickets corresponding to the user, the device, and the relationship. A device identification ticket and a user identification ticket are used to authenticate the device and user for interaction within the deployable computing environment. A device claim ticket allows the device to perform delegated operations (e.g., data synchronization, peer connectivity, etc.) on behalf of the user without the user's credentials (e.g., user identification ticket).

主权项

1. A method, comprising:
using, by a computing device, a device claim ticket that defines a relationship between a user and the computing device to authorize the computing device to perform a user operation on behalf of the user, the authorization including validating that the relationship between the user and the computing device remains valid; and performing, by the computing device, the user operation on behalf of the user.