Patent ID: 7764793

Claim:
A method of distributing security data in a system comprising a first trusted device, a second security device having a pre-established security relationship with said trusted device, and a third device having a secure relationship with said second device and requiring data from said trusted device in order to establish a secure relationship with said trusted device, said method comprising: configuring said first device and said second device so as to allow secure communications between said first device and said second device via a network; configuring said second device and said third device so as to allow secure communications between said second device and said third device; encrypting a first key at said first device as an encrypted first key; encrypting a message at said first device as an encrypted message; sending said encrypted first key from said first device to said second device; sending said encrypted message from said first device to said second device; decrypting said encrypted first key at said second device to obtain said first key; sending said encrypted message to said third device from said second device; sending said first key to said third device from said second device; decrypting said encrypted message at said third device with said first key to obtain said message; sending said message to said first device from said third device so as to demonstrate to said first device that said third device has said first key; encrypting security data with said first key at said first device as encrypted security data; sending said encrypted security data from said first device to said third device; encrypting security data with said first key at said first device as encrypted security data; sending said encrypted security data from said first device to said third device; sending an initialization message from said first device to said second device wherein said initialization message comprises a key data and a unit address; sending a reply message from said second device to said third device to indicate successful reception of said initialization message by said second device, wherein said reply message comprises said unit address; receiving said reply message at said third device; coupling said reply message with said certificate of said third device; sending said reply message and said certificate from said third device to said first device; receiving said reply message and said certificate at said first device; extracting said unit address contained in said certificate; and determining whether said unit address contained in said certificate and said unit address of said reply message match.