Secure component certificate provisioning
AssigneeInternational Business Machines Corporation
InventorKenneth A Goldman
Life of this patent
Estimating the term…
Abstract
A system and method for secure component provisioning implements a three-way transaction to thwart fraudulent component provisioning when a certificate requester is not fully trusted. A certificate authority receives a certificate request for a component from a contract manufacturer and then issues the certificate, sending the issued certificate to a final assembly point for provisioning of the component.
Claims16
A method for secure component certificate provisioning, comprising:
- receiving, over an unsecured public network, a certificate request by a first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party;
- generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party;
- and
- preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using a processor, a secure provisioned component over the unsecured public network, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network from the first party to the third party for provisioning the component with the issued certificate, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component.
An information processing system for secure component certificate provisioning comprising:
- a processor device of a first party;
- a memory device operably coupled with the processor device, said memory device having computer-executable instructions stored thereon for:
- receiving, over an unsecured public network, a certificate request by the first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party;
- generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party;
- and
- preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using the processor, a secure provisioned component over the unsecured public network, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network from the first party to the third party for provisioning the component with the issued certificate, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component.
A computer program product for secure component provisioning, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor device of a first party to cause the processor device to perform:
- receiving, over an unsecured public network, a certificate request by the first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party;
- generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party;
- and
- preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using the processor, a secure provisioned component, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network to the third party from the first party for provisioning the component with the issued certificate using the key, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component.
Dependencies are inferred from the claim text.