Patent ID: 7430664
Filing Date: 2008-09-30
Classification: H04L

Abstract:
1. A provisioning system for authenticating an authorized device and providing a configuration instruction to the authorized device over an open network, the provisioning system comprising: non-volatile storage for storing, for each a plurality of authorized devices, a configuration instruction in association with an identification of the authorized device; a secure transport module for receiving a secure hyper text transport protocol connection request from the device and, in response thereto, establishing a secure hyper text transport protocol communication channel with the device using a symmetric encryption algorithm and a mutually calculated shared secret key; a sever authentication certificate including identification of the provisioning system; a provisioning module for providing, through the secure communication channel, the configuration instruction and the server authentication certificate to the device only if an identification of the device included in a device authentication certificate matches the identification of an authorized device with which a configuration instruction is associated; and the configuration instruction being one of: i) a configuration file and ii) a configuration image; and the configuration instruction including at least one of: i) configuration parameters for the authorized device; and ii) identification of a second provisioning server and identification and a cipher key; and the provisioning system further comprising a registration module: for authenticating a provisioning information server; receiving from the provisioning information server, for each authorized device, the configuration instruction associated with the authorized device; and writing the configuration instruction, in association with the device ID of the authorized device with which the configuration instruction associates, to the non volatile storage.