Unified secure device provisioning

A method for provisioning a secure terminal comprising:

• generating a key using a key generator element on the secure terminal;
• generating a relative time stamp using a clock on the secure terminal;
• sending a key validation request for the key, from a key validation request generator element on the secure terminal to a provisioning device;
• storing, prior to sending the key validation request, the relative time stamp on the secure terminal;
• receiving the key validation request, at a key validation request parser element on the provisioning device;
• parsing the key validation request with the key validation request parser element on the provisioning device;
• generating, on the provisioning device:
• (i) a key validation for the key validation request generator element;
• and (ii) a trusted time stamp attached to the key validation;
• sending, from the provisioning device, the key validation and the trusted time stamp to the secure terminal;
• receiving the key validation and the trusted time stamp, at the secure terminal;
• determining, on the secure terminal and after receiving the key validation, an elapsed time period using the clock and the relative time stamp;
• setting the clock on the secure terminal using the trusted time stamp;
• and
• storing the key validation on the secure terminal;
• wherein the storing of the key validation on the secure terminal is executed if the elapsed time is less than a predetermined threshold.

A system for provisioning a secure terminal comprising:

• a key generator element on the secure terminal that generates a key;
• a provisioning device connected to the secure terminal by a connection;
• a key validation request generator element on the secure terminal that sends a key validation request for the key to the provisioning device using the connection;
• a key validation request parser element on the provisioning device that receives and parses the key validation request;
• a trusted time source element on the provisioning device that generates a trusted time stamp in response to the key validation request;
• a key validation parser element on the secure terminal that receives the trusted time stamp from the provisioning device, and receives and parses a key validation;
• a clock on the secure terminal that is set by the key validation parser element using the trusted time stamp;
• and
• a key storage element on the secure terminal that stores the key validation from the provisioning device;
• wherein the provisioning device:
• (i) generates the key validation in response to the key validation request;
• and (ii) subsequently sends the trusted time stamp and key validation to the secure terminal using the connection;
• and
• wherein:
• the clock on the secure terminal generates a relative time stamp;
• the secure terminal stores the relative time stamp prior to sending the key validation request;
• the secure terminal determines an elapsed time period using the clock and the relative time stamp after receiving the key validation;
• and
• the secure terminal stores the key validation on the secure terminal if the elapsed time is less than a predetermined threshold.