User and device onboarding

1. A computing platform for onboarding a device into a trusted connected system by establishing a secure communication pathway with the device, the computing platform comprising:

one or more memory storage areas; and

one or more processors collectively configured to:

receive, over a network, device data comprising a unique machine identifier corresponding to the device and a first public cryptography key generated by the device in response to a command provided to the device from an external device; and

generate a device-specific installation package comprising:

a second public cryptography key generated by the one or more processors as a part of a second public-private cryptography key pair;

the unique machine identifier;

a device agent, wherein the device agent comprises a monitoring agent which periodically transmits parameters used for monitoring trust of the device and device environment to the computing platform;

a one-time use nounce; and

an executable installation script configured to cause the device to install the device agent and to initiate a secure communication connection between the device and the computing platform by passing a message encrypted with the second public cryptography key back to the computing platform, wherein the message comprises the one-time use nounce;

encrypt the device-specific installation package via the first public cryptography key;

provide the device-specific installation package to the device; and

establish a secure communication pathway with the device upon receipt of the encrypted message from the device at least in part by:

comparing a nounce value from the monitoring agent included within the encrypted message received from the device against the one-time use nounce included within the device-specific installation package; and

upon determining a match between the nounce value and the one-time use nounce, establish the secure communication pathway with the device and invalidate the one-time use nounce.

2. The computing platform of claim 1 , wherein establishing a secure communication pathway comprises:

decrypting the encrypted message received from the device using a private cryptography key of the second public-private cryptography key pair; and

upon verifying contents of the encrypted message received from the device, establishing the secure communication pathway.

3. The computing platform of claim 1 , wherein receiving device data comprises receiving manual input provided by a user via a platform dashboard user interface.

4. The computing platform of claim 1 , wherein receiving device data comprises receiving device data correlated with an untrusted device; and wherein establishing a secure communication pathway with the device converts the untrusted device into a trusted device.

5. The computing platform of claim 1 , wherein providing the device-specific installation package to the device comprises:

generating a device-specific URI accessible by the device via a network; and

pointing the device-specific URI to a download script causing the device to download the device-specific installation package upon accessing the device-specific URI.

6. The computing platform of claim 1 , wherein the one or more processors are further configured to generate a self-signed platform certificate for the device; and wherein the device-specific installation package further comprises the self-signed platform certificate for validating an identity of the computing platform at the device.

7. The computing platform of claim 1 , wherein generating the device-specific installation package further comprises determining whether the device is capable of maintaining a trusted connection between the device agent and the computing platform based at least in part on output of an executable pre-install script executing on the external device.

8. A computer-implemented method for onboarding a device into a trusted connected system by establishing a secure communication pathway between the device and a computing platform, the method comprising:

receiving, over a network, device data comprising a unique machine identifier corresponding to the device and a first public cryptography key generated by the device in response to a command provided to the device from an external device;

generating a second public-private cryptography key pair comprising a second public cryptography key; and

generating a device-specific installation package comprising:

the second public cryptography key;

the unique machine identifier;

a device agent, wherein the device agent comprises a monitoring agent which periodically transmits parameters used for monitoring trust of the device and device environment to the computing platform;

a one-time use nounce; and

an executable installation script configured to cause the device to install the device agent and to initiate a secure communication connection between the device and the computing platform by passing a message encrypted with the second public cryptography key back to the computing platform, wherein the message comprises the one-time use nounce;

encrypting the device-specific installation package via the first public cryptography key;

providing the device-specific installation package to the device; and

establishing a secure communication pathway with the device upon receipt of the encrypted message from the device at least in part by:

comparing a nounce value from the monitoring agent included within the encrypted message received from the device against the one-time use nounce included within the device-specific installation package; and

upon determining a match between the nounce value and the one-time use nounce, establish the secure communication pathway with the device and invalidate the one-time use nounce.

9. The computer-implemented method of claim 8 , wherein establishing a secure communication pathway comprises:

decrypting the encrypted message received from the device using a private cryptography key of the second public-private cryptography key pair; and

upon verifying contents of the encrypted message received from the device, establishing the secure communication pathway.

10. The computer-implemented method of claim 8 , wherein receiving device data comprises receiving manual input provided by a user via a platform dashboard.

11. The computer-implemented method of claim 8 , wherein receiving device data comprises receiving device data correlated with an untrusted device; and wherein establishing a secure communication pathway with the device converts the untrusted device into a trusted device.

12. The computer-implemented method of claim 8 , wherein providing the device-specific installation package to the device comprises:

generating a device-specific URI accessible by the device via a network; and

pointing the device-specific URI to a download script causing the device to download the device-specific installation package upon accessing the device-specific URI.

13. The computer-implemented method of claim 8 , further comprising: generating a self-signed platform certificate for the device; and wherein the device-specific installation package further comprises the self-signed platform certificate.