Patent ID: 8762737

Claim:
A method performed on a product control system, the product control system including product control entities for provisioning a computer related product, the product control entities configured to support generation and communication of product identifiers, the product control system further includes a product authenticity responsible entity, and a product manufacturing entity, the method comprising the steps of: manufacturing a product unit at the product manufacturing entity; maintaining a product control database at the product authenticity responsible entity; assigning a first identifier to the product unit for the purpose of establishing a boot integrity identity of the product unit, said first identifier being an asymmetric private-public encryption key pair stored in the product control database of the product authenticity responsible entity, the first identifier indicating the boot integrity identity being generated by the product authenticity responsible entity; storing a copy of the public part of said first identifier in a memory of the product unit; assigning a second identifier to the product unit for the purpose of establishing a logistics identity of the product unit, said second identifier comprising manufacturing information; assigning a third identifier for the product unit for the purpose of establishing a production identity of the product unit, said third identifier being an asymmetric private-public encryption key pair generated by activating an encryption key generator chip provided in the product unit; maintaining the private part of the third identifier indicating a production identity within the encryption key generator chip; extracting from said encryption key generator chip a copy of the public part of said third identifier indicating a production identity in the product control database; storing the second identifier indicating the logistics identity and storing a copy of the public part of the third identifier indicating a production entity in the product control database of the authenticity responsible entity; generating a fourth identifier for the product unit for the purpose of establishing an operational identity of the product unit, said fourth identifier being an asymmetric private-public encryption key pair; generating an identification entity comprising an encrypted fourth identifier indicating the operational identity, wherein the fourth identifier is encrypted in a manner so that fourth identifier can be decrypted using said third identifier or an escrow key; and storing the identification entity in the product control database maintained in said authenticity responsible entity.