Application programming interface for certificate management systems
Inventors
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-12706898-B2
Publication Date
2026-08-11
Expiration Date
Abstract
A system can include a certificate application programming interface (API) device that is operable to receive, via an application programming interface (API), an enrollment request for the at least one computerized device. The certificate API device can also generate, via the API, an enrollment package and an end entity certificate package for the at least one computerized device by obtaining the enrollment package and the end entity certificate package from a certificate management service (CMS). The certificate API device can also transmit, via the API, the enrollment package and the end entity certificate package to the at least one computerized device. The system can also include the CMS that is operable to provide the enrollment package and the end entity certificate package to the certificate API device.
Core Innovation
The invention relates to a certificate application programming interface (API) device and a certificate management service (CMS) for securely provisioning at least one computerized device with digital asset material. The certificate API device is communicatively connected to the computerized device via a first secure communication channel and is operable to receive a digital asset and to load the digital asset into the computerized device. The certificate API device receives, via an API, an enrollment request for the at least one computerized device and generates an enrollment package by transmitting enrollment certificate requests to the CMS and receiving one or more enrollment certificates for inclusion in the enrollment package.
The enrollment package includes bootstrapping data and the one or more enrollment certificates for the computerized device, where the one or more enrollment certificates are separate from the bootstrapping data. The bootstrapping data includes computer program updates that enable the computerized device to install an application to be executed. The certificate API device transmits, via the API, the enrollment package to the computerized device, and the enrollment package is operable to modify the computerized device.
The enrollment package facilitates exchanging of secure communications between the computerized device and additional computerized devices, and it enables the computerized device to exchange secure communications with additional computerized devices. In embodiments, the invention also generates an end entity certificate package separately from the enrollment package by transmitting end entity certificate requests to the CMS and receiving one or more end entity certificates for inclusion. The API-mediated provisioning supports receipt of an enrollment request that facilitates communications between computerized devices, including vehicle to vehicle or vehicle to infrastructure communications.
Claims Coverage
The independent claims include four inventive claim categories covering a system, a method, computer-readable media, and another method variant. Across these independent claims, the core inventive features are the API-based enrollment request handling, the generation of an enrollment package with separate enrollment certificates and bootstrapping data including computer program updates, secure transmission to modify the computerized device, and enabling exchanging of secure communications, with an additional independent method variant adding a separately generated end entity certificate package.
API-based enrollment request to CMS and secure package transmission
A certificate application programming interface (API) device receives, via an API, an enrollment request for the at least one computerized device; generates, via the API, an enrollment package by transmitting at least one enrollment certificate request to a certificate management service (CMS) and receiving one or more enrollment certificates for inclusion; and transmits, via the API, the enrollment package to the at least one computerized device.
Separate enrollment certificates and bootstrapping data with program updates
The enrollment package includes bootstrapping data and the one or more enrollment certificates for the at least one computerized device, where the one or more enrollment certificates are separate from the bootstrapping data; and the bootstrapping data includes computer program updates that enable the at least one computerized device to install an application to be executed.
Device modification enabling exchanging secure communications
The enrollment package is operable to modify the at least one computerized device, wherein the enrollment package facilitates exchanging of secure communications between the at least one computerized device and additional computerized devices.
Computer-readable media implementing API-based enrollment package generation
One or more non-transitory computer-readable media comprising a plurality of computer-executable instructions for an application programming interface (API) that uses a digital asset, wherein execution causes the processor to receive, via the API, an enrollment request; generate, via the API, an enrollment package by transmitting at least one enrollment certificate request to a certificate management service (CMS) and receiving one or more enrollment certificates for inclusion; and transmit, via the API, the enrollment package to the at least one computerized device to modify the at least one computerized device for exchanging secure communications with additional computerized devices.
Separate generation of enrollment package and end entity certificate package
A method in which generating, via the API, the enrollment package by transmitting at least one enrollment certificate request to a certificate management service (CMS) generates one or more enrollment certificates for inclusion, and generating, via the API, the end entity certificate package by transmitting at least one end entity certificate request to the CMS generates one or more end entity certificates; and transmitting, via the API, the enrollment package and the end entity certificate package to the at least one computerized device configured to modify the at least one computerized device to exchange secure communications with additional computerized devices.
The independent claims cover an API-based enrollment flow where a certificate API device or API instructions receive an enrollment request, generate an enrollment package from CMS-provided certificates with bootstrapping data including computer program updates, and transmit the package to modify the computerized device to exchange secure communications. One independent claim variant further requires separately generating and transmitting an end entity certificate package.
Stated Advantages
Facilitates exchanging of secure communications between the computerized device and additional computerized devices.
Enables the computerized device to exchange secure communications with additional computerized devices.
Documented Applications
Securely provisioning computerized devices for vehicle to vehicle or vehicle to infrastructure communications.
Provisioning at least one computerized device such that it can install an application to be executed via bootstrapping data.
Interested in licensing this patent?