Registration and Credential Roll-out for Accessing a Subscripton-based Service

摘要

A user may access a subscription-based service via a system comprising one or more devices with one or more separate domains where each domain may be owned or controlled by one or more different local or remote owners. Each domain may have a different owner, and a remote owner offering a subscription-based service may have taken ownership of a domain, which may be referred to as a remote owner domain. Further, the user may have taken ownership of a domain, which may be referred to as a user domain. In order for the user to access the subscription-based service, registration and credential roll-out may be needed. An exemplary registration and credential roll-out process may comprise registration of the user, obtaining credentials from the remote owner and storing the credentials.

主权项

1. In a system comprising a device comprising a plurality of domains supported by at least one platform, wherein the plurality of domains are isolated from each other, each domain of the plurality of domains comprises a configuration of computing resources executing on the at least one platform, and each domain of the plurality of domains is configured to perform functions for an owner of the domain that may be located locally or remotely from the domain, a method comprising:
associating a user with a user domain of the plurality of domains, such that the user owns the user domain, and access to resources of the user domain is limited to entities authorized by the user; registering the user with an owner as a user of a service to be rendered by the owner through an owner domain of the plurality of domains, the owner domain being owned by the owner and having resources such that access to the resources of the owner domain is limited to entities authorized by the owner; requesting credentials from the owner, which comprises sending, by the user domain, a credential roll-out request to the owner domain, the credential roll-out request including information that identifies a third party that facilitates use of the service by the user; obtaining the credentials, by the owner domain, from the owner, wherein the credentials enable the user to use the service; storing the credentials in the owner domain; and receiving, by the user domain, an acknowledgement from the owner domain that the credentials have been received by the owner domain.