Trusted certificate authority to create certificates based on capabilities of processes

摘要

A device certificate (112,206,518) binds an identity of a first device (100,200,500) to a public key of the first device. The first device comprises a certificate authority service that creates for a process (104,220,530) on the first device a process certificate (102,224,538) certifying one or more capabilities of the process on the first device. The process certificate is presented to a second device (106,250,600). Upon validating the process certificate using the device certificate, the second device permits the process on the first device to have on the second device one or more of the verified certified capabilities.