System and method for securing data transport between a non-ip endpoint device that is connected to a gateway device and a connected service

A method of device identification for enrollment and registration of an endpoint device that is connected to a gateway device using a multi-stage verified boot loader, a discovery agent at the endpoint device, a discovery service at the gateway device, an enrollment service, a policy service, and a device management service, the method comprising:

• sending, by the discovery agent on the endpoint device, to the discovery service on the gateway device, an authenticated identity beacon with an endpoint device profile;
• verifying, by the discovery service, the authenticated identity beacon of the endpoint device and the endpoint device profile;
• generating, by the discovery service, a certificate request for the endpoint device from a privacy certificate authority;
• sending, by the discovery service, the certificate request for the endpoint device to the enrollment service;
• processing, by the enrollment service, the certificate request for the endpoint device that is received in order to translate the certificate request for a certificate authority;
• sending, by the enrollment service to the certificate authority, the translated certificate request for the endpoint device;
• receiving, by the enrollment service, a certificate for the endpoint device issued by the certificate authority;
• processing, by the enrollment service, the received certificate for the endpoint device in order to translate the received certificate for the endpoint device to represent a privacy certificate authority;
• sending, by the enrollment service, the certificate for the endpoint device to the discovery service;
• sending, by the enrollment service, a notification of endpoint device registration to the policy service;
• sending, by the policy service, a directive to add the endpoint device to a device management service;
• and
• storing, by the discovery service, the issued endpoint device certificate in a local certificate store.