DEVICE AUTHENTICATION WITHIN DEPLOYABLE COMPUTING ENVIRONMENT

摘要

A deployable computing environment may facilitate interaction and data sharing between users and devices. Users, devices, and relationships between the users and devices may be represented within the deployable computing environment. A relationship between a user and a device may specify that the device is owned by the user and that the device is authorized to perform operations within the deployable computing environment on behalf of the user. Secure authentication of devices and users for interaction within the deployable computing environment is achieved by authenticating tickets corresponding to the user, the device, and the relationship. A device identification ticket and a user identification ticket are used to authenticate the device and user for interaction within the deployable computing environment. A device claim ticket allows the device to perform delegated operations (e.g., data synchronization, peer connectivity, etc.) on behalf of the user without the user's credentials (e.g., user identification ticket).

主权项

1. A computing device, comprising:
one or more processing units; and memory storing instructions that when executed by at least one of the one or more processing units, cause the computing device to perform operations, the operations comprising:
using a device claim ticket that defines a relationship between a user and a device to authorize the device to perform a user operation on behalf of the user regardless of whether the user has authorized performance of the user operation via a user identification ticket; andperforming the user operation on behalf of the user regardless of whether the user has authorized performance of the user operation.