Hewlett-packard Development Company, L.p.

Luke T Mather

Joshua Serratelli Schiffman

Christopher Charles Mohrman

Boris Balacheff

Jonathan Griffin

Nassir Mohammad

Gurchetan Grewal

A method for providing a set of certificates encoding authorisations, the method comprising processing respective ones of multiple authorisation requests at a trusted signing authority apparatus to verify respective digital signatures applied to the requests, the multiple authorisation requests received over a first communication link between the trusted signing authority apparatus and an administration apparatus, validating one or more authorisation request parameters of respective ones of the authorisation requests, generating a certificate encoding an authorisation at the trusted signing authority apparatus and transmitting the generated certificate to the administration apparatus or a requesting apparatus over a second communication link.

Authentication of entitlement certificates

In one example in accordance with the present disclosure, a computing device is described. The computing device includes an encryption device to encrypt, using an encryption key, a document to be rendered. A generating device generates multiple shares of a decryption key using a secret-sharing scheme. A threshold number of the multiple shares allows decryption of the document. A transmit device transmits different shares of the multiple shares to different devices. The document is rendered when the threshold number of multiple shares are rejoined at a rendering device.

Encryption key shares to different devices for rendering

A method for managing entitlement of a device to access a service, the method comprising providing an authenticated identity for the device, the authenticated identity including a public encryption key pair associated with the device signed by a trusted authority, and generating a device entitlement certificate encoding an authorisation related to the service and including a public key of the public encryption key pair associated with the device, wherein the device entitlement certificate is signed by the trusted authority.

Managing entitlement

User equipment, the user equipment to receive data representing identity information broadcast by a rendering apparatus over a passive non-contact short proximity data transport mechanism when the user equipment is proximate the rendering apparatus, and push the gathered identity information to a workstation, to enable the workstation to connect with the rendering apparatus.

Growing community of inventors

Bristol, United Kingdom

Luke T Mather