Method and system for securely provisioning a remote device

1. A method at a computing device for provisioning a network-connected device within a security platform, the method comprising:

receiving a first connection request, the first connection request being from an electronic apparatus distinct from the network-connected device, and including a network-connected device identifier for the network-connected device;

authenticating the first connection request, thereby creating a first connection;

receiving a second connection request, the second connection request being from the network-connected device and including the network-connected device identifier and a shared platform credential;

receiving a request from the network-connected device to add the network-connected device to the security platform;

adding the network-connected device to the security platform based on a concurrent first connection and the request from the network-connected device to add the network-connected device to the security platform;

receiving a third connection request from a second network-connected device;

determining that no connection request including an identifier for the second network-connected device was received from any electronic apparatus; and

ignoring the third connection request.

2. The method of claim 1 , further comprising:

sending an acknowledgement to the network-connected device; and

receiving a public key from the network-connected device.

3. The method of claim 1 , wherein the second connection request is based on a physical interaction with the network-connected device.

4. The method of claim 1 , further comprising, prior to the receiving the first connection request:

sending client software to the network-connected device, the client software including the shared platform credential.

5. The method of claim 4 , wherein the shared platform credential includes a certificate and a private key.

6. The method of claim 1 , further comprising:

receiving a fourth connection request, the fourth connection request being from a second electronic apparatus and including a network-connected device identifier;

determining that authentication of the second electronic apparatus fails; and

ignoring the fourth connection request.

7. The method of claim 1 , further comprising, prior to the adding:

determining that the network-connected device has been previously added to the security platform;

ignoring the request from the network-connected device to add the network-connected device to the security platform; and

disabling the network-connected device from the security platform.

8. The method of claim 7 , further comprising creating a security flag for the network-connected device.

9. A computing device configured for provisioning a network-connected device within a security platform, the computing device comprising:

a processor;

a memory, and

a communications subsystem,

wherein the computing device is configured to:

receive a first connection request, the first connection request being from an electronic apparatus distinct from the network-connected device and including a network-connected device identifier for the network-connected device;

authenticate the first connection request, thereby creating a first connection;

receive a second connection request, the second connection request being from the network-connected device and including the network-connected device identifier and a shared platform credential;

receive a request from the network-connected device to add the network-connected device to the security platform;

add the network-connected device to the security platform based on a concurrent first connection and the request from the network-connected device to add the network-connected device to the security platform;

receive a third connection request from a second network-connected device;

determine that no connection request including an identifier for the second network-connected device was received from any electronic apparatus; and

ignore the third connection request.

10. The computing device of claim 9 , wherein the computing device is further configured to:

send an acknowledgement to the network-connected device; and

receive a public key from the network-connected device.

11. The computing device of claim 9 , wherein the second connection request is based on a physical interaction with the network-connected device.

12. The computing device of claim 9 , wherein the computing device is further configured to, prior to receiving the first connection request:

send client software to the network-connected device, the client software including the shared platform credential.

13. The computing device of claim 12 , wherein the shared platform credential includes a certificate and a private key.

14. The computing device of claim 9 , wherein the computing device is further configured to:

receive a fourth connection request, the fourth connection request being from a second electronic apparatus and including a network-connected device identifier;

determine that authentication of the second electronic apparatus fails; and

ignore the fourth connection request.

15. The computing device of claim 9 , wherein the computing device is further configured to, prior to adding:

determine that the network-connected device has been previously added to the security platform;

ignore the request from the network-connected device to add the network-connected device to the security platform; and

disable the network-connected device from the security platform.

16. The computing device of claim 15 , wherein the computing device is further configured to create a security flag for the network-connected device.

17. A non-transitory computer readable medium for storing instruction code, which when executed by a processor of a computing device configured for provisioning a network-connected device within a security platform, cause the computing device to:

receive a first connection request, the first connection request being from an electronic apparatus distinct from the network-connected device and including a network-connected device identifier for the network-connected device;

authenticate the first connection request, thereby creating a first connection;

receive a second connection request, the second connection request being from the network-connected device and including the network-connected device identifier and a shared platform credential;

receive a request from the network-connected device to add the network-connected device to the security platform;

add the network-connected device to the security platform based on a concurrent first connection and the request from the network-connected device to add the network-connected device to the security platform;

receive a third connection request from a second network-connected device;

determine that no connection request including an identifier for the second network-connected device was received from any electronic apparatus; and

ignore the third connection request.