Patent ID: 11893550
Assignee: THALES DIS CPL USA, INC.
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 11:
12. A Web-based payment system comprising:
at least one payment Hardware Security Module (HSM) physically hosted in a data center and remotely accessible, over a communication network, by at least one remote end-user entity running at least one payment application adapted to use critical resources protected in the at least one payment HSM,
said at least on payment HSM comprising:
a processor; and
a memory on which are stored machine-readable instructions that, when executed by the processor, cause the processor to perform configuration of:
a first interface to allow remote access to the at least one payment HSM over the communication network by the at least one remote end-user entity;
a second interface supported by a given communication channel over the communication network to allow for main, operational management of the at least one payment HSM by the at least one remote end-user entity,
a third interface supported by a communication channel over the communication network being distinct and physically isolated from the given communication channel of the second interface, to allow secure access to the at least one payment HSM by a third-party entity, distinct from the at least one remote end-user entity, for Out-Of-Band (OOB) management of the at least one payment HSM by the third-party entity,

and cause the processor to additionally implement a resident, remotely configurable provisioning state-machine for management of provisioning of the payment HSM for service to one or more end-user entities, through one or more transitioning methods under control of the third-party entity over the third interface as part of the OOB management.