Patent ID: 8832444

Claim:
A method to be performed by a provisioning server, the method comprising: assigning to each of L group shared secrets {gss q } its own unique subset of M q of N group shared secret identifying keys; storing information from which it is determinable which unique subset of M q of the N group shared secret identifying keys was assigned to each group shared secret gss q ; provisioning one or more client devices {j} by: assigning to each client device j its own subset of P j of the L group shared secrets {gss q }; providing to each client device j the P j group shared secrets that were assigned thereto; and for each of the P j group shared secrets assigned to each client device j, providing to the client device j the M q group shared secret identifying keys that were assigned to that group shared secret, wherein L, P j , N, and M q are positive integers, P j is less than L, and M q is less than N.