Patent ID: 8806209

Claim:
A method, comprising: receiving a first message at a provisioning server, the first message originated by a computing device, the first message including a device identifier associated with an automation device; receiving a second message at the provisioning server, the second message originated by the automation device and including at least a device identifier portion; and in response to the device identifier portion of the second message matching the device identifier of the first message, and in response to the automation device not being associated with a provisioning account, providing configuration information to the automation device; wherein the provisioning server has access to a database configured to store a plurality of device identifiers and corresponding private-public key pairs, each device identifier and corresponding private-public key pair associated with a given automation device, wherein the device identifier portion of the second message is encrypted using a public key, the public key stored in the automation device during manufacturing of the automation device, the method further comprising: decrypting at least the device identifier portion of the second message into a decrypted device identifier using a private key corresponding to the public key; and in response to the decrypted device identifier matching the device identifier of the first message, transmitting the private key to the automation device by the provisioning server, the automation device configured to use the private key in a subsequent communication.