Secure provisioning and management of devices
Systems and methods for secure provisioning and management of computerized devices. The system may include a distributor appliance that is communicatively connected to the computerized device, and that is operable to receive a digital asset and to load the digital asset into the computerized device. It may include an optional digital asset management system that is connected via a secure communication channel to the distributor appliance, and that is operable to transmit the digital asset to the distributor appliance; and a provisioning controller that is connected via a secure communication channel to the distributor appliance and is connected via another secure communication channel to the optional digital asset management system, and that is operable to directly or indirectly transmit the digital asset to the distributor appliance. The computerized device is not fully functional before the digital asset is loaded into it.
1. A system for securely provisioning a computerized device, the system comprising:
a first secure distributor computer that is communicatively connected to the computerized device, and that receives a first digital asset and transmits the first digital asset to the computerized device, wherein the first digital asset is configured to cause the computerized device to become partially functional;
a digital asset management server that is connected via a first secure communication channel to the first secure distributor computer, and that transmits the first digital asset to the first secure distributor computer;
a provisioning controller that is connected via a second secure communication channel to the first secure distributor computer and is connected via a third secure communication channel to the digital asset management server, and that directs the digital asset management server to transmit the first digital asset to the first secure distributor computer; and
a second secure distributor computer that is connected via a fourth secure communication channel to the digital asset management server and that is communicatively connected to the computerized device after the first secure distributor computer is disconnected from the computerized device, and that receives a second digital asset and transmits the second digital asset to the computerized device, wherein the second digital asset is configured to cause the computerized device to become fully functional;
wherein the provisioning controller also directs the digital asset management server to transmit the second digital asset to the second secure distributor computer;
wherein the computerized device is fully functional after the second digital asset is transmitted to the computerized device.
2. The system of claim 1 , further comprising:
a first portal for the provisioning controller that authenticates a manufacturer of the computerized device and enables the manufacturer to manage provisioning of the computerized device.
3. The system of claim 1 , further comprising:
a second portal for the provisioning controller that authenticates an installer of the computerized device.
4. The system of claim 1 , further comprising:
a third portal for the provisioning controller that authenticates a regulator of the computerized device and enables the regulator to regulate provisioning of the computerized device.
5. The system of claim 1 , wherein the provisioning controller transmits a third digital asset to the first secure distributor computer or the second secure distributor computer for transmitting to the computerized device.
6. The system of claim 5 , wherein the third digital asset is executable code that is run by the computerized device.
7. The system of claim 1 , wherein the second digital asset is at least one of: a digital certificate, a cryptographic key, and executable software.
8. The system of claim 1 , wherein the provisioning controller creates and maintains a log that is associated with the computerized device and that stores information regarding the provisioning activities for the computerized device.
9. The system of claim 8 , wherein the first secure distributor computer transmits information regarding provisioning activities related to the computerized device to the provisioning controller for storing in the log.
10. The system of claim 1 , wherein the provisioning controller authenticates the computerized device before a digital asset is transmitted to the computerized device.
11. The system of claim 1 , wherein the computerized device is an embedded Universal Integrated Circuit Card.
12. The system of claim 1 , wherein the computerized device is an on board unit.
13. The system of claim 1 , wherein the digital asset management server comprises a plurality of servers.
14. The system of claim 1 , wherein the digital asset management server is a secure credential management system.
15. A method for provisioning a computerized device, the method comprising:
generating a first instruction, by a provisioning controller, to instruct a digital asset management server to transmit a first digital asset to a first secure distributor computer;
in response to the first instruction, transmitting the first digital asset from the digital asset management server to the first secure distributor computer;
transmitting the first digital asset from the first secure distributor computer to the computerized device, wherein the first digital asset is configured to cause the computerized device to become partially functional;
generating a second instruction, by the provisioning controller after a second secure distributor computer is connected to the computerized device, to instruct the digital asset management server to transmit a second digital asset to the second secure distributor computer;
in response to the second instruction, transmitting the second digital asset from the digital asset management server to the second secure distributor computer; and
transmitting the second digital asset from the second secure distributor computer to the computerized device, wherein the second digital asset is configured to cause the computerized device to become fully functional;
wherein the computerized device is fully functional after the second digital asset is transmitted to the computerized device;
wherein:
the first secure distributor computer is communicatively connected to the computerized device;
the digital asset management server is connected via a first secure communication channel to the first secure distributor computer;
the provisioning controller is connected via a second secure communication channel to the first secure distributor computer and is connected via a third secure communication channel to the digital asset management server; and
the second secure distributor computer is connected via a fourth secure communication channel to the digital asset management server and is communicatively connected to the computerized device after the first secure distributor computer is disconnected from the computerized device.
16. The method of claim 15 , wherein transmitting the first digital asset from the digital asset management server to the first secure distributor computer comprises transmitting at least one of: a digital certificate, a cryptographic key, and executable code that is run by the computerized device.
17. The method of claim 15 , wherein transmitting the second digital asset from the digital asset management server to the second secure distributor computer comprises transmitting at least one of: a digital certificate, a cryptographic key, and executable code that is run by the computerized device.
18. A system for securely provisioning a computerized device, the system comprising:
a first secure distributor computer that is communicatively connected to the computerized device, and that receives a first digital asset and transmits the first digital asset to the computerized device, wherein the first digital asset is configured to cause the computerized device to become partially functional;
a provisioning controller that is connected via a first secure communication channel to the first secure distributor computer and that transmits the first digital asset to the first secure distributor computer; and
a second secure distributor computer that is connected via a second secure communication channel to the provisioning controller and that is communicatively connected to the computerized device after the first secure distributor computer is disconnected from the computerized device, and that receives a second digital asset and transmits the second digital asset to the computerized device, wherein the second digital asset is configured to cause the computerized device to become fully functional;
wherein the provisioning controller transmits the second digital asset to the second secure distributor computer; and
wherein the computerized device is fully functional after the second digital asset is transmitted to the computerized device.
19. The system of claim 18 , wherein the first digital asset is at least one of: executable code that is run by the computerized device and a digital certificate.
20. The system of claim 18 , wherein the second digital asset is at least one of: a digital certificate, a cryptographic key, and executable code.
21. The system of claim 18 , wherein the provisioning controller creates and maintains a log that is associated with the computerized device and that stores information regarding the provisioning activities for the computerized device.
22. The system of claim 21 , wherein the first secure distributor computer transmits information regarding provisioning activities related to the computerized device to the provisioning controller for storing in the log.
23. The system of claim 18 , wherein the provisioning controller authenticates the computerized device before a digital asset is transmitted to the computerized device.
24. The system of claim 18 , wherein the computerized device is an embedded Universal Integrated Circuit Card.
25. The system of claim 18 , wherein the computerized device is an on board unit.
26. The system of claim 18 , further comprising:
a digital asset management server that is connected via a third secure communication channel to the first secure distributor computer, is connected via a fourth secure communication channel to the provisioning controller, and is connected via a fifth secure communication channel to the second secure distributor computer;
wherein the digital asset management server transmits a third digital asset to the first secure distributor computer or the second secure distributor computer for transmitting to the computerized device.
27. The system of claim 26 , wherein the digital asset management server is a secure credential management system.
28. A method for provisioning a computerized device, the method comprising:
transmitting, by a provisioning controller, a first digital asset to a first secure distributor computer;
transmitting the first digital asset from the first secure distributor computer to the computerized device, wherein the first digital asset is configured to cause the computerized device to become partially functional;
transmitting, by the provisioning controller after a second secure distributor computer is connected to the computerized device, a second digital asset to the second secure distributor computer; and
transmitting the second digital asset from the second secure distributor computer to the computerized device, wherein the second digital asset is configured to cause the computerized device to become fully functional;
wherein the computerized device is fully functional after the second digital asset is transmitted to the computerized device;
wherein:
the first secure distributor computer is communicatively connected to the computerized device;
the provisioning controller is connected via a first secure communication channel to the first secure distributor computer; and
the second secure distributor computer is connected via a second secure communication channel to the provisioning controller and is communicatively connected to the computerized device after the first secure distributor computer is disconnected from the computerized device.
29. The method of claim 28 , wherein transmitting, by the provisioning controller, the first digital asset to the first secure distributor computer comprises transmitting at least one of: a digital certificate, a cryptographic key, and executable code that is run by the computerized device.
30. The method of claim 28 , wherein transmitting, by the provisioning controller after the second secure distributor computer is connected to the computerized device, the second digital asset to the second secure distributor computer comprises transmitting at least one of: a digital certificate, a cryptographic key, and executable code that is run by the computerized device.