Systems, methods, and devices for multi-stage provisioning and multi-tenant operation for a security credential management system

A system for securely provisioning a plurality of computerized devices of a plurality of tenants, the system comprising:

• a security credential management system (SCMS) host that is communicatively connected to the plurality of computerized devices and that is operable to receive provisioning requests from respective ones of the plurality of computerized devices needing certificates, each provisioning request indicating a tenant identifier (ID) uniquely identifying a tenant of the plurality of tenants and a device type identifying the device type for the respective ones of the plurality of computerized devices, wherein each tenant ID is associated with one or more computerized devices of the respective ones of the plurality of computerized devices needing certificates;
• and
• a registration authority that is communicatively connected to the SCMS host and is operable to receive, from the SCMS host based on the tenant ID, a provisioning request from among the provisioning requests, and to transmit the received provisioning request to a set of SCMS backend components associated with the registration authority, the set of SCMS backend components comprising:
• an enrollment certificate authority operable to generate an enrollment certificate in response to receiving a provisioning request for an enrollment certificate from the associated registration authority;
• and
• a pseudonym certificate authority operable to generate pseudonym certificates in response to receiving a provisioning request for pseudonym certificates from the registration authority,
• wherein the SCMS host is configured to verify whether a computerized device associated with a provisioning request is approved by an authorizing body based on the device type prior to sending the provisioning request to the registration authority, and
• wherein the SCMS host is configured to track a number of computerized devices provisioned for each of the plurality of tenants and of each device type based on the provisioning requests, and to verify, based on the tracking, that overproduction has not occurred for a particular device type.

A computer implemented method for securely provisioning a plurality of computerized devices of a plurality of tenants, the method comprising:

• receiving, by a security credential management system (SCMS) host that is communicatively connected to the plurality of computerized devices, provisioning requests from the plurality of computerized devices needing certificates, each provisioning request indicating a tenant identifier (ID) uniquely identifying a tenant of the plurality of tenants and a device type identifying the device type for the respective ones of the plurality of computerized devices, wherein each tenant ID is associated with one or more computerized devices of the plurality of computerized devices needing certificates;
• and
• routing, by the SCMS host, based at least in part on the tenant ID and the device type, the provisioning requests to a registration authority that is communicatively connected to the SCMS host and is operable to transmit the provisioning requests to a set of SCMS backend components, the set of SCMS backend components comprising:
• an enrollment certificate authority operable to generate the enrollment certificates in response to receiving the provisioning requests for the enrollment certificates from the registration authority;
• a pseudonym certificate authority operable to generate pseudonym certificates in response to receiving the provisioning requests for pseudonym certificates from the registration authority,
• wherein the SCMS host is configured to verify whether a computerized device associated with a provisioning request is approved by an authorizing body based on the device type prior to routing the provisioning request to the registration authority;
• counting a number of computerized devices provisioned for each of the plurality of tenants and each device type based on the provisioning requests;
• and
• verifying, based on the counting, that overproduction has not occurred for a particular device type.