Technologies for device commissioning

Abstract

Technologies for device commissioning include a rendezvous server to receive, from a buyer device, a request to transfer ownership of a compute device to the buyer device. The rendezvous server verifies the provenance of the compute device based on a block chain and establishes a secure session with the compute device in response to verification of the provenance. The block chain identifies each transaction associated with ownership of the compute device.

1 . An apparatus comprising:
 one or more processors coupled to a memory, the one or more processors to:   receive, from a buyer computing device, a request to transfer ownership of a computing device to the buyer computing device;   verify provenance of the computing device based on a block chain, wherein the block chain identifies one or more transactions associated with ownership of the computing device; and   instruct the computing device to update its ownership to identify the buyer computing device as the owner.   
     
     
         2 . The apparatus of  claim 1 , wherein the one or more processors are further to:
 receive a device token associated with a transfer of the ownership of the computing device; and   establish a sequence of transactions resulting in a device token being received along with the request to transfer the ownership of the computing device   
     
     
         3 . The apparatus of  claim 1 , wherein the one or more processors are further to:
 deny the request to transfer the ownership of the computer device in response to identification of on inconsistency in the block chain; and   establish a secure session with the computing device in response to verification of the provenance.   
     
     
         4 . The apparatus of  claim 1 , wherein the one or more processors are further to:
 instruct the computing device to perform attestation using a private Enhanced Privacy Identification (EPID) key provisioned to the computing device by a manufacturer of the computing device; and   verify that a public EPID key associated with the computing device is associated with a correct manufacturer based on the block chain.   
     
     
         5 . The apparatus of  claim 4 , wherein the block chain includes a device commissioning record that identifies the apparatus is stored by the buying computing device, and wherein the device commissioning record further includes a hash of a public cryptographic key associated with the apparatus. 
     
     
         6 . The apparatus of  claim 1 , wherein the apparatus comprises a rendezvous server, and wherein the one or more processors are coupled to a memory and include one or more application processors or one or more graphics processors. 
     
     
         7 . A method comprising:
 receiving, by one or more processors of a rendezvous server, a request from a buyer computing device to transfer ownership of a computing device to the buyer computing device;   verifying provenance of the computing device based on a block chain, wherein the block chain identifies one or more transactions associated with ownership of the computing device; and   instructing the computing device to update its ownership to identify the buyer computing device as the owner.   
     
     
         8 . The method of  claim 7 , further comprising:
 receiving a device token associated with a transfer of the ownership of the computing device; and   establishing a sequence of transactions resulting in a device token being received along with the request to transfer the ownership of the computing device   
     
     
         9 . The method of  claim 7 , further comprising:
 denying the request to transfer the ownership of the computer device in response to identification of on inconsistency in the block chain; and   establishing a secure session with the computing device in response to verification of the provenance.   
     
     
         10 . The method of  claim 7 , further comprising:
 instructing the computing device to perform attestation using a private Enhanced Privacy Identification (EPID) key provisioned to the computing device by a manufacturer of the computing device; and   verifying that a public EPID key associated with the computing device is associated with a correct manufacturer based on the block chain.   
     
     
         11 . The method of  claim 10 , wherein the block chain includes a device commissioning record that identifies the rendezvous server is stored by the buying computing device, and wherein the device commissioning record further includes a hash of a public cryptographic key associated with the apparatus. 
     
     
         12 . The method of  claim 1 , wherein the one or more processors are coupled to a memory and include one or more application processors or one or more graphics processors. 
     
     
         13 . A computer-readable medium having stored thereon instructions which, when executed, cause one or more processors of a rendezvous server to perform operations comprising:
 receiving a request from a buyer computing device to transfer ownership of a computing device to the buyer computing device;   verifying provenance of the computing device based on a block chain, wherein the block chain identifies one or more transactions associated with ownership of the computing device; and   instructing the computing device to update its ownership to identify the buyer computing device as the owner.   
     
     
         14 . The computer-readable medium of  claim 13 , wherein the operations further comprise:
 receiving a device token associated with a transfer of the ownership of the computing device; and   establishing a sequence of transactions resulting in a device token being received along with the request to transfer the ownership of the computing device   
     
     
         15 . The computer-readable medium of  claim 13 , wherein the operations further comprise:
 denying the request to transfer the ownership of the computer device in response to identification of on inconsistency in the block chain; and   establishing a secure session with the computing device in response to verification of the provenance.   
     
     
         16 . The computer-readable medium of  claim 13 , wherein the operations further comprise:
 instructing the computing device to perform attestation using a private Enhanced Privacy Identification (EPID) key provisioned to the computing device by a manufacturer of the computing device; and   verifying that a public EPID key associated with the computing device is associated with a correct manufacturer based on the block chain.   
     
     
         17 . The computer-readable medium of  claim 16 , wherein the block chain includes a device commissioning record that identifies the rendezvous server is stored by the buying computing device, and wherein the device commissioning record further includes a hash of a public cryptographic key associated with the apparatus. 
     
     
         18 . The computer-readable medium of  claim 13 , wherein the one or more processors are coupled to a memory and include one or more application processors or one or more graphics processors.