US 12,407,516 B2
Anti-cloning architecture for device identity provisioning
Alexander Medvinsky, San Diego, CA (US); Xin Qiu, San Diego, CA (US); Ting Yao, San Diego, CA (US); Jason Pasion, San Diego, CA (US); Oscar Jiang, West Covina, CA (US); Rafie Shamsaasef, San Diego, CA (US); and Tat Keung Chan, San Diego, CA (US)
Assigned to ARRIS Enterprises LLC, Suwanee, GA (US)
Filed by ARRIS Enterprises LLC, Suwanee, GA (US)
Filed on May 10, 2023, as Appl. No. 18/195,624.
Claims priority of provisional application 63/340,451, filed on May 10, 2022.
Prior Publication US 2023/0370270 A1, Nov. 16, 2023
Int. Cl. H04L 9/32 (2006.01); H04L 9/08 (2006.01); H04L 9/40 (2022.01)
CPC H04L 9/3226 (2013.01) [H04L 9/0877 (2013.01); H04L 9/3242 (2013.01); H04L 9/3263 (2013.01); H04L 63/20 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A credential distribution system for providing device credentials to a plurality of devices, comprising:
a credential builder, for generating the credentials or procuring the credentials from a source external to the credential distribution system;
a credential loader;
a credential server, for accepting credential requests from the devices and for receiving the requested credentials from the credential loader;
a first secured interface, communicatively coupling the credential loader and the credential server;
a second secured interface, communicatively coupling the credential server and the device;
a central credential database, communicatively coupled to the credential loader, for storing each the credentials and a provisioning history of each of the credentials;
a credential server database, communicatively coupled to the credential server, for storing the credentials local to the credential server; and
a cloning detection system, communicatively coupled to the central credential database and the credential server database, the cloning detection system for:
detecting duplicate credentials using the credentials stored in the central credential database and the credential server database;
wherein the credential loader checks the central credential database and the credential server database to determine that the credential was not previously loaded in the credential server before loading a new credential in the credential server;
wherein the credential loader compares a hash of the credential stored in the central credential database with a hash of the credential stored in the credential server database.