# US 10,454,919 B2 · Secure component certificate provisioning > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,454,919 B2 - Document ID: US10454919B2 - Status: Granted - Kind: B2 - Application number: 14/191,119 - Filed: 2014-02-26 - Published: 2015-08-27 - Granted: 2019-10-22 - Earliest claimed: 2014-02-26 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Kenneth A Goldman - Web page: https://patentgrep.com/patent/US10454919B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system and method for secure component provisioning implements a three-way transaction to thwart fraudulent component provisioning when a certificate requester is not fully trusted. A certificate authority receives a certificate request for a component from a contract manufacturer and then issues the certificate, sending the issued certificate to a final assembly point for provisioning of the component. ## Claims ### Claim 1 A method for secure component certificate provisioning, comprising: receiving, over an unsecured public network, a certificate request by a first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party; generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party; and preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using a processor, a secure provisioned component over the unsecured public network, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network from the first party to the third party for provisioning the component with the issued certificate, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component. ### Claim 2 (depends on 1) The method of claim 1 wherein receiving the certificate request comprises receiving a public key of a private/public key pair. ### Claim 3 (depends on 1) The method of claim 1 wherein sending the issued certificate to the third party comprises forwarding the issued certificate to a final assembly point within a same organization as the first party. ### Claim 4 An information processing system for secure component certificate provisioning comprising: a processor device of a first party; a memory device operably coupled with the processor device, said memory device having computer-executable instructions stored thereon for: receiving, over an unsecured public network, a certificate request by the first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party; generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party; and preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using the processor, a secure provisioned component over the unsecured public network, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network from the first party to the third party for provisioning the component with the issued certificate, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component. ### Claim 5 (depends on 4) The information processing system of claim 4 wherein the second party is a component manufacturer. ### Claim 6 (depends on 4) The information processing system of claim 4 further comprising a transmission link between the first party and the second party. ### Claim 7 (depends on 6) The information processing system of claim 6 wherein the transmission link is unreliable. ### Claim 8 (depends on 4) The information processing system of claim 4 wherein the second party is an untrusted entity. ### Claim 9 (depends on 4) The information processing system of claim 4 wherein the third party is a final assembly point. ### Claim 10 (depends on 9) The information processing system of claim 9 wherein the final assembly point is part of a same organization as the first party. ### Claim 11 (depends on 4) The information processing system of claim 4 wherein the component comprises an object selected from a group consisting of: a machine part, a hardware component, and a software component. ### Claim 12 (depends on 4) The information processing system of claim 4 wherein the key comprises a public key of a private/public key pair. ### Claim 13 (depends on 11) The information processing system of claim 11 wherein the component is a Web server. ### Claim 14 (depends on 11) The information processing system of claim 11 wherein the component is a Trusted Platform Module. ### Claim 15 A computer program product for secure component provisioning, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor device of a first party to cause the processor device to perform: receiving, over an unsecured public network, a certificate request by the first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party; generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party; and preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using the processor, a secure provisioned component, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network to the third party from the first party for provisioning the component with the issued certificate using the key, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component. ### Claim 16 (depends on 15) The computer program product of claim 15 wherein the component comprises an object selected from a group consisting of: a machine part, a hardware component, and a software component.