Secure provisioning and management of devices
Inventors
Lattin, William L. • Sequino, David R. • Meyer, Alan T. • Powell, Gregory A.
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-11586709-B2
Publication Date
2023-02-21
Expiration Date
Abstract
Systems, methods and devices are provided for provisioning a computerized device. The system may include a distributor computer that is connected to the computerized device and is operable to receive a first digital asset and transmit it to the computerized device, and a server that is connected to the distributor computer, and that transmits the first digital asset to the distributor computer when a first authorizing condition is met, the first digital asset being configured to cause the computerized device to become partially provisioned, wherein the server transmits a second digital asset to the computerized device, and the computerized device is functional after the second digital asset is transmitted to the computerized device.
Core Innovation
A secure provisioning system securely provisions a computerized device by using a digital asset management server and a secure distributor computer connected to the computerized device. The system transmits a first digital asset to the computerized device such that the computerized device becomes partially provisioned.
The provisioning process is completed by transmitting a second digital asset to the computerized device. The digital asset management server transmits the second digital asset to the computerized device, and the computerized device is functional after the second digital asset is transmitted.
Authorizing and control are supported by separate determination of authorizing conditions, including that a computerized device is approved for use with the system or that a user of the distributor computer is an authorized user. The description further indicates secure management and handling of digital assets, including audit logs and provisioning records with device and user identifiers and timestamps, and scalable digital asset management architecture supporting certificate enrollment and revocation.
Claims Coverage
The disclosed claim set includes four independent claims. Across the independent claims, the coverage centers on multi-stage digital asset transmission that causes partial provisioning and then functional operation, with transmission of at least the first digital asset conditioned on a first authorizing condition and completed by transmission of a second digital asset.
First digital asset transmission for partial provisioning with first authorizing condition
A secure distributor computer receives and transmits a first digital asset to the computerized device, where the first digital asset is configured to cause partial provisioning, and the digital asset management server transmits the first digital asset to the secure distributor computer when a first authorizing condition is met.
Second digital asset transmission to make device functional
The digital asset management server transmits a second digital asset to the computerized device such that the computerized device is functional after the second digital asset is transmitted.
Method transmitting first digital asset when first authorizing condition is met
A method for provisioning the computerized device transmits, by a digital asset management server, a first digital asset to a secure distributor computer when a first authorizing condition is determined to be met, and transmits the first digital asset to the computerized device so that the computerized device becomes partially provisioned.
Method transmitting second digital asset in response to instruction to become functional
The method receives, by the digital asset management server, an instruction to transmit a second digital asset to the computerized device, and in response transmits the second digital asset so that the computerized device becomes functional.
Server and distributor computer secure provisioning architecture for partial then functional
A system has a distributor computer connected to the computerized device that transmits a first digital asset to cause partial provisioning, and a server transmits the first digital asset to the distributor computer when a first authorizing condition is met, then transmits a second digital asset so the computerized device is functional.
Method with server sending first digital asset then later sending second digital asset
A method transmits, by a server, a first digital asset to a distributor computer when a first authorizing condition is determined to be met, the distributor computer transmits the first digital asset to partially provision the computerized device, and the server later transmits a second digital asset to cause the computerized device to become functional in response to an instruction.
The independent claims collectively cover secure provisioning using two digital assets where the first digital asset causes partial provisioning under a first authorizing condition, and a later second digital asset makes the computerized device functional. The coverage spans both system architectures and method flows that transmit the first and second digital assets with conditional gating and sequencing.
Stated Advantages
Not explicitly described in patent.
Documented Applications
Not explicitly described in patent.
Interested in licensing this patent?