# US 12,216,803 B2 · Provisioning control apparatus and method for provisioning electronic components or devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,216,803 B2 - Document ID: US12216803B2 - Status: Granted - Kind: B2 - Application number: 17/961,735 - Filed: 2022-10-07 - Published: 2023-04-13 - Granted: 2025-02-04 - Earliest claimed: 2021-10-07 - Assignees: Secure Thingz Ltd. - Applicants: Secure Thingz Ltd. - Inventors: Andrew Bott - Web page: https://patentgrep.com/patent/US12216803B2 ## CPC - G06F 21/72: in cryptographic circuits - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - H04L 9/0827: {involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18)} - H04L 9/0833: {involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065)} - H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB} - H04L 63/065: {for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833)} - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04L 67/1095: Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes - H04L 2463/062: applying encryption of the keys - H04W 12/76: Group identity - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A provisioning control apparatus configured to be coupled to a provisioning equipment server electrically connectable with one or more electronic devices for provisioning the electronic devices with security sensitive provisioning data. The provisioning control apparatus includes a processor configured to generate a group context for sharing the group context with a first further provisioning control apparatus for creating a group of provisioning control apparatuses. The processor is configured to assign an identity to the first further provisioning control apparatus. The identity of the first further provisioning control apparatus is indicative of the provisioning control apparatus and the first further provisioning control apparatus. The processor is configured to generate the security sensitive provisioning data based on the group context. The provisioning control apparatus includes a communication interface configured to provide the security sensitive provisioning data to the provisioning equipment server. ## Claims ### Claim 1 A provisioning control apparatus configured to be coupled to a provisioning equipment server, the provisioning equipment server being electrically connectable with one or more electronic devices for provisioning the electronic devices with security sensitive provisioning data, wherein the provisioning control apparatus comprises: a processor configured to generate a group context for sharing the group context with a first further provisioning control apparatus for creating a group of provisioning control apparatuses, wherein the processor is further configured to assign an identity to the first further provisioning control apparatus, wherein the identity of the first further provisioning control apparatus is indicative of the provisioning control apparatus and the first further provisioning control apparatus; wherein the processor is further configured to generate the security sensitive provisioning data based on the group context, wherein the provisioning control apparatus further comprises a communication interface configured to provide the security sensitive provisioning data to the provisioning equipment server. ### Claim 2 (depends on 1) The provisioning control apparatus of claim 1, wherein the communication interface is further configured to provide the group context to the first further provisioning control apparatus. ### Claim 3 (depends on 1) The provisioning control apparatus of claim 1, wherein the communication interface is further configured to receive one or more wrapped OEM keys from a remote OEM server and wherein the processor is configured to unwrap the one or more wrapped OEM keys based on the group context and to generate the security sensitive provisioning data based on the one or more OEM keys. ### Claim 4 (depends on 1) The provisioning control apparatus of claim 1, wherein the communication interface is further configured to provide the group context to a security server for generating a proxy provisioning control apparatus on the security server, wherein the proxy provisioning control apparatus is configured to provide the group context to a second further provisioning control apparatus for enrolling the second further provisioning control apparatus for the group of provisioning control apparatuses, wherein the second further provisioning control apparatus is configured to be coupled to the provisioning equipment server. ### Claim 5 (depends on 1) The provisioning control apparatus of claim 1, wherein the group context comprises a group private key, a certificate for the group private key and a group encryption key used for encryption and/or decryption. ### Claim 6 (depends on 1) The provisioning control apparatus of claim 1, wherein the processor is further configured to assign an identity to a second further provisioning control apparatus, wherein the identity of the second further provisioning control apparatus is indicative of the provisioning control apparatus and the second further provisioning control apparatus. ### Claim 7 A provisioning control apparatus configured to be coupled to a provisioning equipment server, the provisioning equipment server being electrically connectable with one or more electronic devices for provisioning the one or more electronic devices with security sensitive provisioning data, wherein the provisioning control apparatus comprises: a communication interface configured to receive a group context from a first further provisioning control apparatus for creating a group of provisioning control apparatuses, wherein the communication interface is further configured to receive an identity from the first further provisioning control apparatus, wherein the identity of the provisioning control apparatus is indicative of the provisioning control apparatus and the first further provisioning control apparatus; and a processor configured to generate the security sensitive provisioning data based on the group context, wherein the communication interface is further configured to provide the security sensitive provisioning data to the provisioning equipment server. ### Claim 8 (depends on 7) The provisioning control apparatus of claim 7, wherein the communication interface is further configured to receive one or more wrapped OEM keys from a remote OEM server and wherein the processor is configured to unwrap the one or more wrapped OEM keys based on the group context and to generate the security sensitive provisioning data based on the one or more OEM keys. ### Claim 9 (depends on 8) The provisioning control apparatus of claim 8, wherein the one or more OEM keys comprise an OEM certificate. ### Claim 10 (depends on 7) The provisioning control apparatus of claim 7, wherein the communication interface is further configured to provide the group context to a security server for generating a proxy provisioning control apparatus on the security server, wherein the proxy provisioning control apparatus is configured to provide the group context to a second further provisioning control apparatus for enrolling the second further provisioning control apparatus in the group of provisioning control apparatuses, wherein the second further provisioning control apparatus is configured to be coupled to the provisioning equipment server for provisioning the electronic devices with the security sensitive provisioning data. ### Claim 11 (depends on 7) The provisioning control apparatus of claim 7, wherein the communication interface is further configured to provide the group context to a second further provisioning control apparatus for enrolling the second further provisioning control apparatus in the group of provisioning control apparatuses, wherein the second further provisioning control apparatus is configured to be coupled to the provisioning equipment server for provisioning the electronic devices with the security sensitive provisioning data. ### Claim 12 (depends on 11) The provisioning control apparatus of claim 11, wherein the processor is configured to assign an identity to the second further provisioning control apparatus, wherein the identity of the second further provisioning control apparatus is indicative of the provisioning control apparatus, the first further provisioning control apparatus and the second further provisioning control apparatus. ### Claim 13 (depends on 7) The provisioning control apparatus of claim 7, wherein the group context comprises a group private key, a certificate for the group private key and a group encryption key used for encryption and/or decryption. ### Claim 14 (depends on 7) A provisioning system comprising: a provisioning control apparatus including: a processor configured to generate a group context for sharing the group context with a first further provisioning control apparatus for creating a group of provisioning control apparatuses, wherein the processor is further configured to assign an identity to the first further provisioning control apparatus, wherein the identity of the first further provisioning control apparatus is indicative of the provisioning control apparatus and the first further provisioning control apparatus; wherein the processor is further configured to generate the security sensitive provisioning data based on the group context, wherein the provisioning control apparatus further comprises a communication interface configured to provide the security sensitive provisioning data to the provisioning equipment server, a provisioning control apparatus according claim 7; and a provisioning equipment server being electrically connectable with one or more electronic devices for provisioning the one or more electronic devices with the security sensitive provisioning data. ### Claim 15 A method for operating a provisioning control apparatus configured to be coupled to a provisioning equipment server, the provisioning equipment server being electrically connectable with one or more electronic devices for provisioning the one or more electronic devices with security sensitive provisioning data, wherein the method comprises: generating a group context for sharing the group context with a first further provisioning control apparatus for creating a group of provisioning control apparatuses, wherein the group context comprises an identity for the first further provisioning control apparatus, wherein the identity of the first further provisioning control apparatus is indicative of the provisioning control apparatus and the first further provisioning control apparatus; generating the security sensitive provisioning data based on the group context; and providing the security sensitive provisioning data to the provisioning equipment server.