END-TO-END AUTHENTICATION AT THE SERVICE LAYER USING PUBLIC KEYING MECHANISMS

摘要

In a machine-to-machine / Internet-of-things environment, end-to-end authentication of devices separated by multiple hops is achieved via direct or delegated/intermediated negotiations using pre-provisioned hop-by -hop credentials, uniquely generated hop-by -hop credentials, and-or public key certificates, whereby remote resources and services may be discovered via single-hop communications, and then secure communications with the remote resources may be established using secure protocols appropriate to the resources and services and capabilities of end devices, and communication thereafter conducted directly without the overhead or risks engendered hop- by-hop translation.