XML schema for service provisioning

1 . A method of provisioning a service on a client computer by using a provisioning XML (extensible markup language) document, wherein the provisioning XML document conforms to a provisioning XML schema comprising:

(a) a content node containing content data identifying the service to be provisioned on the client computer, and

(b) a signature node containing a signature of the content data; the method comprising:

(1) generating the provisioning XML document at a provisioning server;

(2) signing the provisioning XML document using a key derived from a trusted root; and

(3) communicating the provisioning XML document to the client computer.

2 . A method of claim 1 , further comprising configuring the service on the client computer by using the provisioning XML document.

3 . A method of claim 2 , wherein the content node further specifies at least one of: (1) an amount of prepaid time for which the service is to be provisioned; and (2) a subscription period expiry date through which the service is to be provisioned.

4 . A method of claim 2 , wherein the content node further specifies (1) a version of the provisioning XML document, (2) date of creation of the provisioning XML document, (3) time of creation of the provisioning XML document, (4) hardware identification of the client computer; (5) underwriter identification of the creator of the provisioning XML document; (6) a sequence number of the provisioning XML document; and (7) a tracking identification of the provisioning XML document.

5 . A method of claim 2 , wherein the content node further specifies a grace period for which the client computer is allowed to receive the provisioning XML document from the provisioning server.

6 . A method of claim 2 , wherein the content node further specifies an enforcement level for altering a plurality of enforcement parameters of the client computer.

7 . A method of claim 2 , wherein provisioning the service on the client computer further comprises:

validating the signature of the content data; and

parsing the content data if the signature of the content data is verified.

8 . A method of claim 7 , further comprising verifying the signature of the provisioning XML document with a public key hard-coded in a local provisioning module of the client computer.

9 . A method of claim 7 , wherein validating the signature of the content data further comprises:

verifying that a root public key in a certificate chain in the signature is one from a set of hard-coded trusted root keys; and

verifying that a provisioning server signing the provisioning XML document is among a set of trusted signers.

10 . A data structure storing a provisioning XML (extensible markup language) document that conforms to a provisioning XML Schema, the data structure being stored in a data storage device for use by a provisioning server, wherein:

(1) the provisioning XML schema identifies the structure of the provisioning XML document;

(2) the provisioning XML document comprising:

(a) a content node containing content data identifying a service to be provisioned on a client computer, and

(b) a signature node containing a signature of the content data; and

(3) the provisioning XML document is signed using a key derived from a trusted root; and

(4) the provisioning XML document is communicated to the client computer with a public key of the provisioning server.

11 . A data structure of claim 10 , wherein the content node further specifies at least one of: (1) an amount of prepaid time for which the service is to be provisioned; and (2) a subscription period expiry date through which the service is to be provisioned.

12 . A data structure of claim 10 , wherein the content node further specifies (1) a version of the provisioning XML document, (2) date of creation of the provisioning XML document, (3) time of creation of the provisioning XML document, (4) hardware identification of the client computer; (5) underwriter identification of the creator of the provisioning XML document; (6) a sequence number of the provisioning XML document; and (7) a tracking identification of the provisioning XML document.

13 . A data structure of claim 10 , wherein the content node further specifies at least one of: (1) a grace period for which the client computer is allowed to receive the provisioning XML document from the provisioning server; (2) an enforcement level for altering a plurality of enforcement parameters of the client computer.

14 . A service provisioning system for provisioning a service on a client computer, the service provisioning system comprising:

(1) a provisioning server including a processor, a communication module, a computer readable memory, and a provisioning XML document stored on the memory, the provisioning XML document including:

(a) a content node containing content data identifying a service to be provisioned on the client computer, and

(b) a signature node containing a signature of the content data;

the processor adapted to sign the provisioning XML document using a key derived from a trusted root;

the communication module adapted to communicate the provisioning XML document to the client computer; and

the client computer having: (1) a validation module adapted to validate the signature; and (2) a parsing module adapted to parse the content data.

15 . A service provisioning system of claim 14 , wherein the content node further specifies at least one of: (1) an amount of prepaid time for which the service is to be provisioned; and (2) a subscription period expiry date through which the service is to be provisioned.

16 . A service provisioning system of claim 14 , wherein the content node further specifies (1) a version of the provisioning XML document, (2) date of creation of the provisioning XML document, (3) time of creation of the provisioning XML document, (4) hardware identification of the client computer; (5) underwriter identification of the creator of the provisioning XML document; (6) a sequence number of the provisioning XML document; and (7) a tracking identification of the provisioning XML document.

17 . A service provisioning system of claim 14 , wherein the validation module is further adapted to verify that the key from the trusted root is one from a set of hard-coded trusted root keys; and that the provisioning server signing the provisioning XML document is among a set of trusted signers.

18 . A service provisioning system of claim 14 , wherein the content node further specifies at least one of: (1) a grace period for which the client computer is allowed to receive the provisioning XML document from the provisioning server; and (2) an enforcement level for altering a plurality of enforcement parameters of the client computer.

19 . A service provisioning system of claim 14 , wherein the provisioning server and the client computer are communicating with each other over the Internet.