Patent ID: 8761401
Filing Date: 2014-06-24
Classification: H04L

Abstract:
1. A system for distributing public key infrastructure (PKI) data from a PKI data generating facility to at least one product in a product personalization facility, comprising: PKI data generator hardware configured to generate PKI data for loading onto at least one product, wherein the PKI data generator hardware applies an end-to-end-encryption to at least part of the PKI data followed by a PKI Server (PKIS)-specific encryption to at least part of the PKI data; and a PKI download server coupled to the PKI data generator hardware and configured to receive PKI data transmitted from the PKI data generator hardware, wherein the PKI download server is configured to transfer encrypted PKI data to a PKI server that is coupled to the at least one product, wherein the PKI server is configured to remove the PKIS-specific encryption from the encrypted PKI data and apply a PKIS session key encryption, wherein the PKIS session key encryption uses a session key negotiated with the product through an authenticated key agreement protocol, and wherein the PKI data generator hardware is included in a PKI data generation facility and the at least one product for which the PKI data is configured for loading is located in a product personalization facility which is not part of the PKI data generation facility.