Segmented network mobile device provisioning system

A computer program product for provisioning personal computing devices for use on a secured network comprising a non-transitory computer-readable storage medium having computer-executable instructions for:

• receiving, from a personal computing device, a first request to connect to a provisioning network segment to provision the personal computing device to communicate with a secured network segment, wherein the provisioning network segment and the secured network segment are part of a common network, wherein the first request comprises a first set of security credentials to authenticate the personal computing device;
• authenticating the personal computing device to communicate with the provisioning network segment based on the first set of security credentials;
• creating a first network tunnel between the personal computing device and the provisioning network segment, wherein the provisioning network segment comprises a provisioning device capable of communicating a certificate to the personal computing device via the first network tunnel to provision the personal computing device;
• receiving provisioning filter rules for filtering messages communicated via the first network tunnel;
• determining that the personal computing device has communicated a provisioning request to the provisioning device via the first network tunnel, wherein the provisioning request is compliant with the provisioning filter rules;
• determining that the provisioning request is compliant with the provisioning filter rules;
• routing the provisioning request to the provisioning device based on determining that the provisioning request is compliant with the provisioning filter rules;
• receiving a second request, from the personal computing device, for the personal computing device to communicate with the secured network segment, wherein the second request comprises a second set of security credentials based on the certificate;
• authenticating the personal computing device to communicate with the secured network segment based on the second set of security credentials;
• creating a second network tunnel between the personal computing device and the secured network segment based on authenticating the personal computing device to communicate with the secured network segment;
• receiving secured filter rules for filtering messages communicated via the second network tunnel;
• determining that the personal computing device has communicated a secured message to a device that is a part of the secured network segment via the second network tunnel, wherein the secured message is compliant with the secured filter rules;
• and
• routing the secured message to the device that is part of the secured network segment.

A method for managing a personal computing device over a secured network, comprising:

• receiving, via a computer processor, from a personal computing device, a first request to connect to a provisioning network segment to provision the personal computing device to communicate with a secured network segment, wherein the provisioning network segment and the secured network segment are part of a common network, wherein the first request comprises a first set of security credentials to authenticate the personal computing device;
• authenticating, via a computer processor, the personal computing device to communicate with the provisioning network segment based on the first set of security credentials;
• creating, via a computer processor, a first network tunnel between the personal computing device and the provisioning network segment, wherein the provisioning network segment comprises a provisioning device capable of communicating a certificate to the personal computing device via the first network tunnel to provision the personal computing device;
• receiving, via a computer processor, provisioning filter rules for filtering messages communicated via the first network tunnel;
• determining, via a computer processor, that the personal computing device has communicated a provisioning request to the provisioning device via the first network tunnel, wherein the provisioning request is compliant with the provisioning filter rules;
• determining, via a computer processor, that the provisioning request is compliant with the provisioning filter rules;
• routing, via a computer processor, the provisioning request to the provisioning device based on determining that the provisioning request is compliant with the provisioning filter rules;
• receiving, via a computer processor, a second request, from the personal computing device, for the personal computing device to communicate with the secured network segment, wherein the second request comprises a second set of security credentials based on the certificate;
• authenticating, via a computer processor, the personal computing device to communicate with the secured network segment based on the second set of security credentials;
• creating, via a computer processor, a second network tunnel between the personal computing device and the secured network segment based on authenticating the personal computing device to communicate with the secured network segment;
• receiving, via a computer processor, secured filter rules for filtering messages communicated via the second network tunnel;
• determining, via a computer processor, that the personal computing device has communicated a secured message to a device that is a part of the secured network segment via the second network tunnel, wherein the secured message is compliant with the secured filter rules;
• and
• routing, via a computer processor, the secured message to the device that is part of the secured network segment.