Cross-domain identity management for a whitelist-based online secure device provisioning framework

A method for updating network-enabled devices with new identity data, each of said network-enabled devices having at least three types of identifiers associated therewith, comprising:

• receiving over a communications network a request for new identity data for a plurality of network-enabled devices, each of said requests including an identifier of the third- type associated with the network-enabled devices;
• obtaining an identifier of the first type associated with the network-enabled devices, said first identifier type being an identifier that is included in identity data with which the network-enabled device is currently provisioned, wherein the network-enabled devices have previously been provisioned with identifiers of the first type by respectively assigning the identifiers of the first type to network-enabled devices that are already identified by identifiers of the second type;
• receiving new identity data assigned with new identifiers of the first type, wherein each of the new identifiers is matched with a corresponding identifier of the third type;
• and
• delivering over the communications network the new identity data assigned with the new identifiers to respective ones of the network-enabled devices in accordance with their respective third identifiers.

At least one computer-readable medium encoded with instructions which, when executed by a processor, performs a method for updating network-enabled devices with new identity data, each of said network-enabled devices having at least two types of identifiers associated therewith, comprising:

• receiving over a communications network a request for new identity data for a plurality of network-enabled devices, each of said requests including a identifier of the second type associated with the network-enabled devices;
• obtaining an identifier of the first type associated with the network-enabled devices, said first identifier type being an identifier that is included in identity data with which the network-enabled device is currently provisioned, wherein the network-enabled devices have previously been provisioned with identifiers of the first type by respectively assigning the identifiers of the first type to network-enabled devices that are already identified by identifiers of the second type;
• receiving new identity data assigned with new identifiers of the first type, wherein each of the new identifiers is matched with a corresponding identifier of the second type;
• and
• delivering over the communications network the new identity data assigned with the new identifiers to respective ones of the network-enabled devices in accordance with their respective second identifiers.