A data provisioning device for provisioning a data processing entity from a set of data processing entities sharing the same joint decryption key, the data provisioning device comprising: a network interface, the network interface being configured to receive the provisioning data for provisioning the data processing entity, a joint encryption key being associated with the joint decryption key, and control information, the control information indicating a processing scheme to be deployed by the data provisioning device when provisioning the data processing entity, wherein the provisioning data is received from a provisioning data source by the data provisioning device that is separated from the data provisioning source; a processor being configured to process the provisioning data according to the control information to obtain processed provisioning data, to cryptographically encrypt the processed provisioning data using the received joint encryption key to obtain encrypted processed provisioning data; and a device interface being configured to transmit the encrypted processed provisioning data to the data processing entity; wherein the provisioning data comprises generic provisioning data intended for all data processing entities (102-1; 102-2; 102-x) in the set of data processing entities, wherein the processor is configured to process the generic provisioning data for each individual data processing entity (102-1; 102-2; 102-x) in the set of data processing entities in order to obtain individual processed data comprising data portions intended only for the data processing entity, wherein the data processing entity comprises an individual decryption key assigned only to the data processing entity, wherein the network interface is configured to further receive an individual encryption key associated with the individual decryption key of the data processing entity, and wherein the processor is further configured to encrypt the data portion using the individual encryption key prior to encrypting the provisioning data using the joint encryption key in order to process the provisioning data. a network interface, the network interface being configured to receive the provisioning data for provisioning the data processing entity, a joint encryption key being associated with the joint decryption key, and control information, the control information indicating a processing scheme to be deployed by the data provisioning device when provisioning the data processing entity, wherein the provisioning data is received from a provisioning data source by the data provisioning device that is separated from the data provisioning source; a processor being configured to process the provisioning data according to the control information to obtain processed provisioning data, to cryptographically encrypt the processed provisioning data using the received joint encryption key to obtain encrypted processed provisioning data; and a device interface being configured to transmit the encrypted processed provisioning data to the data processing entity; wherein the provisioning data comprises generic provisioning data intended for all data processing entities (102-1; 102-2; 102-x) in the set of data processing entities, wherein the processor is configured to process the generic provisioning data for each individual data processing entity (102-1; 102-2; 102-x) in the set of data processing entities in order to obtain individual processed data comprising data portions intended only for the data processing entity, wherein the data processing entity comprises an individual decryption key assigned only to the data processing entity, wherein the network interface is configured to further receive an individual encryption key associated with the individual decryption key of the data processing entity, and wherein the processor is further configured to encrypt the data portion using the individual encryption key prior to encrypting the provisioning data using the joint encryption key in order to process the provisioning data.