Secure component certificate provisioning
View Patent ↗A system and method for secure component provisioning implements a three-way transaction to thwart fraudulent component provisioning when a certificate requester is not fully trusted. A certificate authority receives a certificate request for a component from a contract manufacturer and then issues the certificate, sending the issued certificate to a final assembly point for provisioning of the component.
1. A method for secure component certificate provisioning, comprising:
receiving, over an unsecured public network, a certificate request by a first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party;
generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party; and
preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using a processor, a secure provisioned component over the unsecured public network, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network from the first party to the third party for provisioning the component with the issued certificate, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component.
2. The method of claim 1 wherein receiving the certificate request comprises receiving a public key of a private/public key pair.
3. The method of claim 1 wherein sending the issued certificate to the third party comprises forwarding the issued certificate to a final assembly point within a same organization as the first party.
4. An information processing system for secure component certificate provisioning comprising:
a processor device of a first party;
a memory device operably coupled with the processor device, said memory device having computer-executable instructions stored thereon for:
receiving, over an unsecured public network, a certificate request by the first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party;
generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party; and
preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using the processor, a secure provisioned component over the unsecured public network, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network from the first party to the third party for provisioning the component with the issued certificate, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component.
5. The information processing system of claim 4 wherein the second party is a component manufacturer.
6. The information processing system of claim 4 further comprising a transmission link between the first party and the second party.
7. The information processing system of claim 6 wherein the transmission link is unreliable.
8. The information processing system of claim 4 wherein the second party is an untrusted entity.
9. The information processing system of claim 4 wherein the third party is a final assembly point.
10. The information processing system of claim 9 wherein the final assembly point is part of a same organization as the first party.
11. The information processing system of claim 4 wherein the component comprises an object selected from a group consisting of: a machine part, a hardware component, and a software component.
12. The information processing system of claim 4 wherein the key comprises a public key of a private/public key pair.
13. The information processing system of claim 11 wherein the component is a Web server.
14. The information processing system of claim 11 wherein the component is a Trusted Platform Module.
15. A computer program product for secure component provisioning, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor device of a first party to cause the processor device to perform:
receiving, over an unsecured public network, a certificate request by the first party from a second party using a transmission medium, said certificate request comprising a key associated with a component sent over the unsecured public network by the second party to a third party;
generating and issuing, by the first party, a certificate corresponding to the key from the certificate request by the second party; and
preventing fraudulent provisioning by preventing receipt of the certificate by a non-trusted requestor by generating and sending, using the processor, a secure provisioned component, the generating and sending the secure provisioned component comprising sending the issued certificate over the unsecured public network to the third party from the first party for provisioning the component with the issued certificate using the key, the secure component certificate provisioning being a one-directional transaction wherein the third party matches the issued certificate to the component for provisioning the component.
16. The computer program product of claim 15 wherein the component comprises an object selected from a group consisting of: a machine part, a hardware component, and a software component.