Secure provisioning and management of devices
Systems, methods and devices for provisioning a computerized device(s). The system may include a distributor computer that is connected to the computerized device, and is operable to receive a digital asset and transmit it to the device. The system may include a digital asset management server that is connected to the distributor computer, and is operable to transmit the digital asset to the distributor computer, and a provisioning controller that is connected to the distributor computer and the digital asset management server, and is operable to cause transmission of the digital asset to the distributor computer. The system can include a second distributor computer that is connected to the digital asset management server and the device (e.g., at a later time), and that receives a second digital asset and transmits it to the device, wherein the second digital asset causes the device to become partially or fully functional.
1. A system for securely provisioning a computerized device, the system comprising:
a first secure distributor computer that is communicatively connected to the computerized device, and that receives a first digital asset and transmits the first digital asset to the computerized device;
a digital asset management server that is connected to the first secure distributor computer, and that transmits the first digital asset to the first secure distributor computer when a first authorizing condition is met, wherein the first digital asset is configured to cause the computerized device to be partially provisioned; and
a provisioning controller that is connected to the first secure distributor computer and the digital asset management server, and that determines whether the first authorizing condition is met; and
a second secure distributor computer that is connected to the digital asset management server and the computerized device, and that receives a second digital asset and transmits the second digital asset to the computerized device, wherein the second digital asset is configured to cause the computerized device to become functional; and
wherein the computerized device is functional after the second digital asset is transmitted to the computerized device.
2. The system according to claim 1 , wherein the first authorizing condition is that the computerized device is approved for use with the system.
3. The system according to claim 1 , wherein the provisioning controller determines whether the computerized device is approved for use with the system by consulting a stored list of approved computerized devices.
4. The system according to claim 1 , wherein the first authorizing condition is that a user of the first secure distributor computer is an authorized user.
5. The system according to claim 1 , wherein the digital asset management server transmits log information regarding the first digital asset to the provisioning controller, and the provisioning controller stores the log information.
6. The system according to claim 5 , wherein the log information includes at least one of an identification of a user of the first secure distributor computer, an identification of the first digital asset, an identification of the first secure distributor computer, and a timestamp of a request for the first digital asset.
7. The system according to claim 1 , wherein the digital asset management server sends the second digital asset to the computerized device when a second authorizing condition is met.
8. The system according to claim 7 , wherein the at least one second authorizing condition is a determination that the computerized device is an authorized computerized device.
9. The system according to claim 7 , wherein the at least one second authorizing condition is a determination that a user of the second secure distributor computer is an authorized user.
10. The system according to claim 1 , wherein the provisioning controller stores log information regarding the second digital asset.
11. A method for provisioning a computerized device, the method comprising:
transmitting a first digital asset from a digital asset management server to a first secure distributor computer when a first authorizing condition is determined to be met by a provisioning controller;
transmitting the first digital asset from the first secure distributor computer to the computerized device, wherein the first digital asset is configured to cause the computerized device to become partially provisioned;
receiving an instruction at the digital asset management server to transmit a second digital asset for provisioning to the computerized device, wherein transmitting the second digital asset from the digital asset management server for provisioning to the computerized device comprises transmitting the second digital asset to a second secure distributor computer;
in response to the instruction, transmitting the second digital asset from the digital asset management server to the computerized device; and
provisioning the second digital asset to the computerized device, wherein the second digital asset is configured to cause the computerized device to become functional, and
wherein the first secure distributor computer is connected to the computerized device and the digital asset management server is connected to the first secure distributor computer.
12. The method of claim 11 , wherein determining whether the first authorizing condition is met comprises determining that the computerized device is approved for use with the system.
13. The method of claim 11 , wherein determining whether the computerized device is approved for use with the system comprises determining whether the computerized device is approved for use with the system by consulting a stored list of approved computerized devices.
14. The method according to claim 11 , wherein determining whether the first authorizing condition is met comprises determining that a user of the first secure distributor computer is an authorized user.
15. The method according to claim 11 , further comprising transmitting log information regarding the first digital asset from the digital asset management server to the provisioning controller, and storing the log information at the provisioning controller.
16. The method according to claim 15 , wherein the log information includes at least one of an identification of a user of the first secure distributor computer, an identification of the first digital asset, an identification of the first secure distributor computer, and a timestamp of a request for the first digital asset.
17. The method according to claim 11 , wherein sending the second digital asset to the computerized device comprises sending the second digital asset to the computerized device when at least one second authorizing condition is met.
18. The method according to claim 17 , wherein the at least one second authorizing condition is a determination that the computerized device is an authorized computerized device.
19. The method according to claim 17 , wherein the at least one second authorizing condition is a determination that a user of the second secure distributor computer is an authorized user.
20. The method according to claim 11 , further comprising stores log information regarding the second digital asset at the provisioning controller.