公开(公告)号：US11240043B1

公开(公告)日：2022-02-01

申请号：US16100890

申请日：2018-08-10

Applicant: Amazon Technologies, Inc.

Inventor： Jonathan Alan Leblang ,  Jaykumar Harish Gosar ,  Farzad Sangi ,  Ankur Rawat ,  Danny Yu ,  Sujay Vaishampayan

IPC: H04L9/32 ,  H04L9/00 ,  H04L29/08 ,  H04W12/06 ,  H04W84/12

Abstract: This disclosure is directed to computing services that provide secure network connections using public-private key-based security for Internet of Things (IoT) devices, such as voice devices, that may have more than a predefined set of users. Device certificates that authorize IoT devices to access a secure network, such as an enterprise network and/or services eternal to an enterprise network are provided. A setup system may cooperate with an IoT device and a subordinate CA to generate a device certificate that allows the IoT device to access a secure enterprise network and services outside of the secure enterprise network. The IoT device may generate a certificate signing request (CSR) which may be signed by a remote subordinate CA to generate the device certificate using a root certificate of an enterprise CA. Systems are also disclosed that renew certificates for the IoT devices prior to their expiration.