US 11,888,996 B1Granted

Systems for provisioning devices

AssigneeAmazon Technologies, Inc.

InventorsUmesh Simkhada, Brandon Whitehead, Parthik Pradipkumar Teli, Thomas Gregory Hinman, David Isbister, Alejandro Steckler

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

This disclosure describes, in part, techniques for provisioning components. For instance, a component may be initially provisioned by a first system. To initially provision the component, the component may receive first data representing a uniform device type, a device identifier, a serial number, and/or a first certificate chain. The component may then store the first data in memory. Additionally, the component may be provisioned using a second system. To provision the component, the component may receive second data representing a product device type, a code, and a second certification chain. The second data received during the second provisioning may be associated with one more capabilities of a device. The component may then store the second data in the memory.

Claims20

Dependent claims

A method, comprising:

receiving, from a first device, first data representing a device identifier and a first device type associated with devices that are provisioned by the first device;
generating a first message representing a first certificate signing request that includes the first device type and the device identifier;
sending the first message;
receiving second data representing a first certificate chain including at least the first certificate signing request signed using first encryption data;
receiving third data representing a product device type indicating one or more capabilities of a second device, the product device type differing from the first device type;
generating a second message representing a second certificate signing request that includes the product device type and the device identifier;
sending the second message;
and
receiving fourth data representing a second certificate chain including at least the second certificate signing request signed using second encryption data.

6 more elements

A system, comprising:

one or more processors;
and
non-transitory computer-readable media storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a first device, first data representing a first device type, the first device type being associated with devices that are provisioned by the first device;
receiving second data representing a device identifier;
generating a first message representing a first certificate signing request that includes the first device type and the device identifier;
sending the first message;
receiving third data representing a first certificate chain including at least the first certificate signing request signed using first encryption data;
receiving fourth data representing a product device type indicating one or more capabilities of a second device, the product device type being different than the first device type;
generating a second message representing a second certificate signing request that includes the product device type and the device identifier;
sending the second message;
and
receiving fifth data representing a second certificate chain including at least the second certificate signing request signed using second encryption data.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/094,097Filed 6 Jan 2023 · continuation
Priority: 19 Sep 2018
Granted: 30 Jan 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 9/0861
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: generation of secret information…
H04L 9/3265
Involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements: using…
G06F 21/73
To assure secure computing or processing of information: by creating or determining hardware identification, e.g. serial numbers
H04L 9/0894
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: escrow, recovery or storing of secret…