# US 10,503,881 B2 · Secure provisioning and management of devices

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,503,881 B2
- Document ID: US10503881B2
- Status: Granted
- Kind: B2
- Application number: 15/812,510
- Filed: 2017-11-14
- Published: 2018-05-17
- Granted: 2019-12-10
- Earliest claimed: 2016-11-14
- Assignees: Integrity Security Services LLC
- Applicants: INTEGRITY Security Services, Inc.
- Inventors: William L. Lattin; David R. Sequino; Alan T. Meyer; Gregory A. Powell
- Web page: https://patentgrep.com/patent/US10503881B2

## CPC

- G06F 21/12: Protecting executable software
- G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]}
- H04L 9/007: {involving hierarchical structures}
- H04L 9/0827: {involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18)}
- H04L 9/0877: {using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04W 4/50: Service provisioning or reconfiguring
- H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC]
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W 12/06: Authentication
- H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning}
- H04L 63/0414: {during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04M 15/715: {Activating new subscriber or card}
- H04W 12/75: Temporary identity
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08)

## Abstract

Systems for secure provisioning and management of computerized devices. The system may include a distributor appliance that is communicatively connected to the computerized device, and that is operable to receive a digital asset and to load the digital asset into the computerized device. It may also include a digital asset management system that is connected via a first secure communication channel to the distributor appliance, and that is operable to generate and conditionally transmit the digital asset to the distributor appliance; and a provisioning controller that is connected via a second secure communication channel to the distributor appliance and is connected via a third secure communication channel to the digital asset management system, and that is operable to direct the digital asset management system to transmit the digital asset to the distributor appliance. The computerized device is not fully functional before the digital asset is loaded into it.

## Claims

### Claim 1

A system for securely provisioning a computerized device, the system comprising:
a first secure distributor appliance that is communicatively connected to the computerized device, and that is operable to receive a first digital asset and to load the first digital asset into the computerized device;
a digital asset management server that is connected via a first secure communication channel to the first secure distributor appliance, and that is operable to generate and conditionally transmit the first digital asset to the first secure distributor appliance;
a provisioning controller that is connected via a second secure communication channel to the first secure distributor appliance and is connected via a third secure communication channel to the digital asset management server, and that is operable to direct the digital asset management server to transmit the first digital asset to the first secure distributor appliance;
a second secure distributor appliance that is connected via a fourth secure communication channel to the digital asset management server and that is communicatively connected to the computerized device after the first secure distributor appliance is disconnected, and that is operable to receive a second digital asset and to load the second digital asset into the computerized device;
wherein the provisioning controller is further operable to direct the digital asset management server to transmit the second digital asset to the second secure distributor appliance;
wherein the computerized device is fully functional after the second digital asset is loaded into the computerized device; and
wherein the computerized device is nonfunctional before the second digital asset is loaded into the computerized device.

### Claim 2 (depends on 1)

The system for securely provisioning a computerized device of claim 1, wherein the system further comprises:
one or more virtual machines that run a registration authority application and that are communicatively connected to one or more compute engines that perform cryptographic computations required by the registration authority application;
one or more virtual machines that run an enrollment certificate authority application and that are communicatively connected to one or more compute engines that perform cryptographic computations required by the enrollment certificate authority application;
one or more virtual machines that run a pseudonym certificate authority application and that are communicatively connected to one or more compute engines that perform cryptographic computations required by the pseudonym certificate authority application;
one or more virtual machines that run a first linkage authority application and that are communicatively connected to one or more compute engines that perform cryptographic computations required by the first linkage authority application; and
one or more virtual machines that run a second linkage authority application and that are communicatively connected to one or more compute engines that perform cryptographic computations required by the second linkage authority application.

### Claim 3 (depends on 2)

The system for securely provisioning a computerized device of claim 2, wherein the system further comprises:
a database that is operably connected to the one or more virtual machines that run the registration authority application, the one or more virtual machines that run the enrollment certificate authority application, the one or more virtual machines that run the pseudonym certificate authority application, the one or more virtual machines that run the first linkage authority application, and the one or more virtual machines that run the second linkage authority application.

### Claim 4 (depends on 1)

The system for securely provisioning a computerized device of claim 1, further comprising:
a first portal that is operably connected to the provisioning controller and that authenticates a manufacturer of the computerized device and enables the manufacturer to manage provisioning of the computerized device.

### Claim 5 (depends on 4)

The system for securely provisioning a computerized device of claim 4, further comprising:
a second portal that is operably connected to the provisioning controller and that authenticates an installer of the computerized device and enables the installer to manage provisioning of the computerized device.

### Claim 6 (depends on 1)

The system for securely provisioning a computerized device of claim 1, further comprising:
a third portal that is operably connected to the provisioning controller and that authenticates a regulator of the computerized device and enables the regulator to regulate provisioning of the computerized device.

### Claim 7 (depends on 1)

The system for securely provisioning a computerized device of claim 1, wherein the provisioning controller is further operable to transmit the first digital asset to the first secure distributor appliance for loading into the computerized device.

### Claim 8 (depends on 7)

The system for securely provisioning a computerized device of claim 7, wherein the first digital asset is executable code that is run by the computerized device.

### Claim 9 (depends on 1)

The system for securely provisioning a computerized device of claim 1, wherein the second digital asset is at least one of: a digital certificate, a cryptographic key, and executable software.

### Claim 10 (depends on 1)

The system for securely provisioning a computerized device of claim 1, wherein the provisioning controller is further operable to create and maintain a log that is associated with the computerized device and that stores information regarding the provisioning activities for the computerized device.

### Claim 11 (depends on 10)

The system for securely provisioning a computerized device of claim 10, wherein the digital asset management server is further operable to transmit information regarding provisioning activities related to the computerized device to the provisioning controller for storing in the log.

### Claim 12 (depends on 10)

The system for securely provisioning a computerized device of claim 10, wherein the first secure distributor appliance is further operable to transmit information regarding provisioning activities related to the computerized device to the provisioning controller for storing in the log.

### Claim 13 (depends on 1)

The system for securely provisioning a computerized device of claim 1, wherein the provisioning controller is further operable to authenticate the computerized device before directing the digital asset management server to transmit the first digital asset.

### Claim 14 (depends on 1)

The system for securely provisioning a computerized device of claim 1, wherein the computerized device is an embedded Universal Integrated Circuit Card (eUICC).

### Claim 15 (depends on 1)

The system for securely provisioning a computerized device of claim 1, wherein the digital asset management server comprises a plurality of servers.