Secure provisioning and management of devices
Inventors
Lattin, William L. • Sequino, David R. • Meyer, Alan T. • Powell, Gregory A.
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-11138294-B2
Publication Date
2021-10-05
Expiration Date
Abstract
Systems, methods and devices are provided for provisioning a computerized device. The system may include a distributor computer that is connected to the computerized device and is operable to receive a first digital asset and transmit it to the computerized device, a server that is connected to the distributor computer, and that transmits the first digital asset to the distributor computer when a first authorizing condition is met, the first digital asset being configured to cause the computerized device to become partially provisioned, and a provisioning controller that is connected to the distributor computer and that determines whether the first authorizing condition is met, the server transmits a second digital asset to the computerized device, and the computerized device is functional after the second digital asset is transmitted to the computerized device.
Core Innovation
The invention provides secure provisioning for a computerized device, including IoT devices, by using a provisioning controller, a secure distributor computer or distributor appliance/computer, and a digital asset management system (DAMS). A first digital asset is transmitted to the computerized device such that the computerized device becomes partially provisioned, and the first digital asset is provided in a controlled way by coordinating transmissions through a digital asset management server and authorizing conditions.
A provisioning controller determines whether a first authorizing condition is met before the digital asset management server transmits the first digital asset to the secure distributor computer. After partial provisioning, the digital asset management server transmits a second digital asset to the computerized device, and the second digital asset is used to cause the computerized device to become fully functional following a later instruction and gating by authorization behavior described in the document.
The document further describes an architecture and operational context that supports secure non-public communication channels between components and the creation of audit log and provisioning records. It includes secure controller protection, portal-based interactions, a scalable DAMS design with certificate authorities and linkage and revocation functions, and device lifecycle states that include nonfunctional and partially functional stages before later digital asset transmission.
Claims Coverage
The partial claims content includes four independent claim sets that each cover secure provisioning using a two-stage digital asset delivery model. Across the independent claims, there are three main inventive features: authorized gating of a first digital asset transmission to cause partial provisioning, use of a provisioning controller to determine whether the first authorizing condition is met, and an authorized second digital asset transmission that causes the computerized device to be functional after the second digital asset is transmitted.
Two-stage digital asset provisioning with partial then functional state
The digital asset management server transmits a first digital asset to the secure distributor computer when a first authorizing condition is met, where the first digital asset is configured to cause the computerized device to become partially provisioned, and then transmits a second digital asset to cause the computerized device to become functional after the second digital asset is transmitted to the computerized device.
Provisioning controller determines first authorizing condition for first digital asset
A provisioning controller is connected to the secure distributor computer and the digital asset management server, and determines whether the first authorizing condition is met such that the digital asset management server transmits the first digital asset to the secure distributor computer only when the first authorizing condition is met.
Second digital asset transmission via instruction in response to instruction
The digital asset management server transmits a second digital asset to the computerized device, where the digital asset management server receives an instruction to transmit the second digital asset and transmits the second digital asset to the computerized device in response to the instruction.
Secure distributor computer connected to device and asset management connectivity
The secure distributor computer is connected to the computerized device and the digital asset management server is connected to the secure distributor computer, enabling the transmission of the first digital asset from the secure distributor computer to the computerized device.
The independent claims collectively cover a secure provisioning system and method that deliver a first digital asset to cause partial provisioning under an authorization condition determined by a provisioning controller, followed by a second digital asset that makes the computerized device functional after it is transmitted.
Stated Advantages
Documented Applications
No documented applications found
Interested in licensing this patent?