Offline digital asset generation and provisioning
A system for offline generation of digital assets includes: a security credential management system (SCMS) that is operable to generate and conditionally transmit digital assets; and a certificate authority communicatively connected to the SCMS by a communication network, the certificate authority being operable to receive the digital assets from the SCMS. The certificate authority is operable to securely provision a plurality of computerized devices based on the received digital assets, the certificate authority intermittently connects to the SCMS to receive the digital assets, the certificate authority is operable to securely provision the plurality of computerized devices while disconnected from the SCMS, and the provisioning by the certificate authority while disconnected from the SCMS is limited by a policy associated with the certificate authority.
1 . A system for offline generation of digital assets, the system comprising:
a security credential management system (SCMS) comprising an electronic processor, wherein the SCMS is operable to generate and conditionally transmit digital assets comprising a certificate authority signing key; and
a certificate authority comprising an electronic processor and communicatively connected to the SCMS by a communication network, the certificate authority being operable to receive the digital assets from the SCMS;
wherein the certificate authority is operable to securely provision a plurality of computerized devices based on the received digital assets by producing signed enrollment certificates using the certificate authority signing key,
wherein the certificate authority intermittently connects to the SCMS to receive the digital assets,
wherein the certificate authority is operable to securely provision the plurality of computerized devices while disconnected from the SCMS, and
wherein the provisioning by the certificate authority while disconnected from the SCMS is limited by a policy associated with the certificate authority.
2 . The system of claim 1 , wherein the certificate authority is a distribution appliance located remotely from the SCMS.
3 . The system of claim 1 , wherein the SCMS comprises a provisioning controller.
4 . The system of claim 1 , wherein the certificate authority is located at the site of a device manufacturer, and
wherein the SCMS is remote from the device manufacturer.
5 . The system of claim 1 , wherein the policy limits the provisioning by the certificate authority while disconnected from the SCMS according to a time of disconnection from the SCMS.
6 . The system of claim 1 , wherein the policy limits the provisioning by the certificate authority while disconnected from the SCMS according to a number of the computerized devices provisioned.
7 . The system of claim 1 , wherein the certificate authority logs information regarding the computerized devices provisioned while disconnected from the SCMS.
8 . The system of claim 7 , wherein the certificate authority transmits the logged information to the SCMS after reconnecting to the SCMS after being disconnected from the SCMS.
9 . The system of claim 8 , wherein the SCMS is operable to determine from the logged information whether the certificate authority performed an unauthorized provisioning while disconnected from the SCMS.
10 . The system of claim 1 , wherein the SCMS is operable to connect to a plurality of certificate authorities.
11 . A method for securely providing certificates, the method comprising:
generating, by a security credential management system (SCMS), digital assets comprising a certificate authority signing key;
conditionally transmitting, by the SCMS, the digital assets;
receiving, by a certificate authority communicatively connected to the SCMS by a communication network, the digital assets from the SCMS; and
securely provisioning, by the certificate authority, a plurality of computerized devices based on the received digital assets, wherein the securely provisioning comprises producing signed enrollment certificates using the certificate authority signing key;
wherein the certificate authority intermittently connects to the SCMS to receive the digital assets,
wherein the certificate authority is operable to securely provision the plurality of computerized devices while disconnected from the SCMS, and
wherein the provisioning by the certificate authority while disconnected from the SCMS is limited by a policy associated with the certificate authority.
12 . The method of claim 11 , wherein the certificate authority is located at the site of a device manufacturer; and
wherein the SCMS is remote from the device manufacturer.
13 . The method of claim 11 , wherein the policy limits the provisioning by the certificate authority while disconnected from the SCMS according to a time of disconnection from the SCMS.
14 . The method of claim 11 , wherein the policy limits the provisioning by the certificate authority while disconnected from the SCMS according to a number of the computerized devices provisioned.
15 . The method of claim 11 , wherein the certificate authority logs information regarding the computerized devices provisioned while disconnected from the SCMS, and
wherein the certificate authority transmits the logged information to the SCMS after reconnecting to the SCMS after being disconnected from the SCMS.
16 . The method of claim 15 , wherein the SCMS is operable to determine from the logged information whether the certificate authority performed an unauthorized provisioning while disconnected from the SCMS.
17 . The method of claim 11 , wherein the SCMS is operable to connect to a plurality of certificate authorities.
18 . A non-transitory computer-readable medium for securely providing certificates, the non-transitory computer-readable medium comprising a plurality of instructions that, in response to execution by a processor, cause the processor to perform operations comprising:
generating, by a security credential management system (SCMS), digital assets comprising a certificate authority signing key;
conditionally transmitting, by the SCMS, the digital assets;
receiving, by a certificate authority communicatively connected to the SCMS by a communication network, the digital assets from the SCMS; and
securely provisioning, by the certificate authority, a plurality of computerized devices based on the received digital assets, wherein the securely provisioning comprises producing signed enrollment certificates using the certificate authority signing key;
wherein the certificate authority intermittently connects to the SCMS to receive the digital assets,
wherein the certificate authority is operable to securely provision the plurality of computerized devices while disconnected from the SCMS, and
wherein the provisioning by the certificate authority while disconnected from the SCMS is limited by a policy associated with the certificate authority.
19 . The non-transitory computer-readable medium of claim 18 , wherein the certificate authority is located at the site of a device manufacturer; and
wherein the SCMS is remote from the device manufacturer.
20 . The non-transitory computer-readable medium of claim 18 , wherein the policy limits the provisioning by the certificate authority while disconnected from the SCMS according to a time of disconnection from the SCMS and/or a number of the computerized devices provisioned.
21 . The non-transitory computer-readable medium of claim 18 , wherein the certificate authority logs information regarding the computerized devices provisioned while disconnected from the SCMS, and
wherein the certificate authority transmits the logged information to the SCMS after reconnecting to the SCMS after being disconnected from the SCMS.
22 . The non-transitory computer-readable medium of claim 21 , wherein the SCMS is operable to determine from the logged information whether the certificate authority performed an unauthorized provisioning while disconnected from the SCMS.