Low friction device enrollment

Abstract

A constrained device includes an exterior surface affixed with a public key associated with the constrained device. Alternatively, or in addition, the public key may be included in a container that stores the constrained device. The constrained device also includes memory, which stores a private key, wherein the private key corresponds to the public key that is affixed on the exterior surface of the constrained device. By displaying the public key on the constrained device, a system administrator may document the public key and related information about the device and its intended role in the network without requiring any human interface or any establishment of power or network at the installation site.

What is claimed is: 
     
         1 . A constrained device comprising:
 an exterior surface affixed with a public key associated with the constrained device; and   memory storing a private key, wherein the private key corresponds to the public key that is affixed on the exterior surface of the constrained device.   
     
     
         2 . The constrained device of  claim 1 , wherein the public key associated with the constrained device is printed on a label on the exterior surface of the constrained device. 
     
     
         3 . The constrained device of  claim 1 , wherein the public key associated with the constrained device is at least one of printed, engraved, and embossed directly the exterior surface of the constrained device. 
     
     
         4 . The constrained device of  claim 1 , wherein the public key associated with the constrained device is embedded in the constrained device as a tag. 
     
     
         5 . The constrained device of  claim 1 , further comprising:
 a key generator that generates the public key of the device and the corresponding private key based on at least one domain parameter stored in memory of the key generator.   
     
     
         6 . The constrained device of  claim 1 , wherein the affixed public key is stored in the memory. 
     
     
         7 . A method for enrolling a constrained device into a network, the method comprising:
 generating, by an authorization server, a database entry to enroll a constrained device into the network, the constrained device having an exterior surface affixed with a public key associated with the constrained device;   generating, by the authorization server, a token for the constrained device; and   issuing the token to the constrained device for authenticating the constrained device in the network.   
     
     
         8 . The method of  claim 7 , wherein the public key associated with the constrained device is printed on a label on the exterior surface of the constrained device. 
     
     
         9 . The method of  claim 7 , wherein the public key associated with the constrained device is at least one of printed, engraved, and embossed directly on the exterior surface of the constrained device. 
     
     
         10 . The method of  claim 7 , wherein the public key associated with the constrained device is embedded in the constrained device. 
     
     
         11 . The method of  claim 7 , wherein the token is at least one of a certificate, a ticket, or a cookie. 
     
     
         12 . A constrained device comprising:
 an exterior surface affixed with a label, wherein an identifier is printed on the label that references a public key corresponding to the constrained device; and   memory storing a private key corresponding to the identifier as the public key corresponding to the constrained device.   
     
     
         13 . The constrained device of  claim 12 , wherein the public key associated with the constrained device is embedded in the constrained device as a tag. 
     
     
         14 . The constrained device of  claim 12 , further comprising:
 a key generator that generates the private key based on the public key and at least one domain parameter stored in memory of the key generator.   
     
     
         15 . The constrained device of  claim 12 , wherein the public key is stored in the memory. 
     
     
         16 . An article comprising:
 a constrained device, the constrained device having memory storing a private key; and   a container adapted to store the constrained device prior to use of the constrained device, wherein the container includes a public key that corresponds to the private key.   
     
     
         17 . The article of  claim 16 , wherein the public key is included on an insert contained within the container. 
     
     
         18 . The article of  claim 16 , wherein the public key is affixed on the container. 
     
     
         19 . The article of  claim 18 , wherein the public key is printed on a label on the container. 
     
     
         20 . The article of  claim 18 , wherein the public key is at least one of printed, engraved, and embossed directly on the container.