Device configuration for secure communication

A non-transitory computer-readable medium having encoded therein programming code executable by a processor to perform operations, the operations comprising:

• in response to a received enrollment message, generating a mapping, the enrollment message being received from a customer device and including a device identification number (device ID) of the customer device, the mapping including a one-time password (OTP) encrypted using the device ID;
• generating a quick response (QR) code, the QR code including a uniform resource locator (URL), a provider certificate (CRT), the OTP encrypted using the device ID, and certificate signing request (CSR) content;
• receiving a confirmation message at a website identified by the URL, the confirmation message including a generated public key, a CSR, and a decrypted OTP;
• verifying the decrypted OTP against the mapping;
• communicating one or more application configuration settings;
• and
• securely communicating information using the one or more application configuration settings, a provider public key, a provider private key, the generated public key, and a generated private key.

A method comprising:

• receiving a read image of a quick response (QR) code, the QR code including a one-time password (OTP) encrypted using a device identification number (device ID), a uniform resource locator (URL), a provider certificate (CRT), and certificate signing request (CSR) content;
• decrypting the OTP using the device ID;
• transmitting a confirmation message to the URL included in the QR code, the confirmation message including a generated public key, a CSR, and a decrypted OTP;
• and
• receiving one or more application configuration settings, the application configuration settings including information used to configure a customer device or a gateway device for secure communication with a provider server.

A method comprising:

• in response to an enrollment message received from a customer device, generating, by a provider server, a mapping including a one-time password (OTP) encrypted using a device identification number (device ID) of the customer device that is included in a received enrollment message;
• generating, by the provider server, a quick response (QR) code, the QR code including a uniform resource locator (URL), a provider certificate (CRT), the OTP encrypted using the device ID, and certificate signing request (CSR) content;
• receiving, by the customer device, a read image of the QR code;
• decrypting, by the customer device, the OTP using the device ID;
• transmitting, by the customer device, a confirmation message including a generated public key, a CSR, and a decrypted OTP to the URL included in the QR code;
• receiving, by the provider server, the confirmation message at a website identified by the URL;
• verifying, by the provider server, the decrypted OTP against the mapping;
• communicating, by the provider server, one or more application configuration settings, the application configuration settings including information used to configure the customer device or a gateway device for secure communication with the provider server;
• receiving, by the customer device, the one or more application configuration settings;
• and
• securely communicating information between the provider server and the customer device or the gateway device using the one or more application configuration settings, a provider public key, a provider private key, the generated public key, and a generated private key.