Security context distribution service

A device, comprising:

• one or more computer processors;
• and
• a memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation comprising:
• initiating an operation to configure the device with a security certificate associated with a first network;
• retrieving a private key that was preconfigured on the device;
• generating a request for a security context for the device, wherein the request is signed using the private key and wherein the request is encrypted using a public key associated with a security context distribution service;
• transmitting the request to the security context distribution service, wherein the security context distribution service is configured to decrypt the request message and validate the signature of the request message;
• receiving a response message from the security context distribution service, wherein the response message contains at least one Transport Layer Security (TLS) certificate associated with the first network, wherein the security context distribution service is configured to sign the response message using a private key associated with the security context distribution service and wherein the security context distribution service is configured to encrypt the response message using a public key associated with the device;
• and
• upon decrypting the response message using the private key preconfigured on the device and validating the signature of the response message, configuring the device to use the received TLS certificate.

A non-transitory computer-readable medium containing computer program code that, when executed by operation of one or more computer processors, performs an operation comprising:

• receiving, at a security context distribution service, from a first device operating on a first network, a request for a security context for the first device, wherein the request is encrypted using a public key of the security context distribution service;
• decrypting the received request using a private key associated with the security context distribution service;
• determining a set of device requirements based on a unique identifier for the first device and device claim information associated with the first device;
• generating a response message that contains at least one Transport Layer Security (TLS) certificate associated with the first network, based on the set of device requirements, wherein the response message is signed using the private key associated with the security context distribution service;
• and
• transmitting the response message to the first device.

A device, comprising:

• one or more computer processors;
• and
• a memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation comprising:
• initiating an operation to configure the device with a security certificate associated with a first network;
• retrieving a public key associated with a security context distribution service;
• generating a request for a security context for the first device, wherein the request is encrypted using the public key associated with the security context distribution service;
• transmitting the request to the security context distribution service, wherein the security context distribution service is configured to decrypt the request message;
• receiving a response message from the security context distribution service, wherein the response message contains at least one Transport Layer Security (TLS) certificate associated with the first network, and wherein the security context distribution service is configured to sign the response message using a private key associated with the security context distribution service;
• and
• upon validating the signature of the response message, configuring the first device to use the received TLS certificate.