Patent CA-3081619-A1 (CA)
Inventor: LATOUR JACQUES
IPC: H04W84/12
Filed: 2020-06-02
Abstract: without adequate security, however new approaches to provide management flexibility while secure the loT devices are also required. [0004]                                                                    Accordingly, systems and methods that enable flexible and secure networked loT device management remains highly desirable.   Date Recue/Date Received 2020-06-02 A system of one or more computers can be configured to perform particular operations or actions by virtue of having software, firmware, hardware, or a combination of them installed on the system that in operation causes or cause the system to perform the actions. One or more computer programs can be configured to perform particular operations or actions by virtue of including instructions that, when executed by data processing apparatus, cause the apparatus to perform the actions. One general aspect includes a method of a networked Internet-of-Things (loT) device management at a registry server. The method also includes receiving through a mobile network a device identifier (ID) and a public encryption certificate (CERT) associated for a networked loT device from a cloud service provider (CSP);  generating an encrypted applet using the public encryption cert associated with the networked loT device, the encrypted applet containing public and private encryption cert for the networked loT device, a registry public cert and CSP network connection information for association with an eSim of the networked loT device; sending the encrypted applet to a mobile network operator (MNO) of the mobile network;  receiving a request from the networked loT device via the mobile network to provide a registry cert; sending the registry cert to the networked loT device;  receiving a request from the networked loT device to provide an associated record for the networked loT device; sending the networked loT device CERT to the networked loT device; receiving a request from the CSP to provide the associated record for the networked loT device; and sending networked IOT device CERT to the CSP.  Other embodiments of this aspect include corresponding computer systems, apparatus, and computer programs recorded on one or more computer storage devices, each configured to perform the actions of the methods. One general aspect includes a non-transitory computer readable memory containing instructions which when executed by a processor perform the method of:. The non-transitory computer readable memory also includes receiving through a mobile network a device identifier (ID) and a public encryption certificate (CERT) associated for a networked loT device from a cloud service provider (CSP);  generating an encrypted applet using the public encryption cert associated with the networked loT device, the encrypted applet containing public and private encryption                                   The secure loT registry and associated provisioning method simplifies the loT  cloud provider operations with respect to managing mobile loT eSIM credential provisioning/certificate key management. The secure loT Registry enables network operators such as a Mobile Network Operator (MNO) to understand and map the loT device ownership in relationship to cloud providers to facilitate business functions like charge back mechanisms. The secure loT registry integrates a next generation registry based Certificate Authority (CA) system enabling trusted and simpler mechanisms to validate certificates and their state.