US 12,132,842 B2
System and method for zero touch provisioning of IoT devices
Srinivas Kumar, Cupertino, CA (US); Atul Gupta, Sunnyvale, CA (US); Shreya Uchil, Millbrae, CA (US); Ruslan Ulanov, Dublin, CA (US); and Srikesh Amrutur Srinivas, Cupertino, CA (US)
Assigned to DigiCert, Inc., Lehi, UT (US)
Filed by DigiCert, Inc., Lehi, UT (US)
Filed on Feb. 20, 2023, as Appl. No. 18/111,646.
Application 18/111,646 is a continuation of application No. 16/696,034, filed on Nov. 26, 2019, granted, now 11,595,217.
Claims priority of provisional application 62/775,949, filed on Dec. 6, 2018.
Prior Publication US 2023/0208652 A1, Jun. 29, 2023
Int. Cl. H04L 9/32 (2006.01)
CPC H04L 9/3263 (2013.01) [H04L 9/3247 (2013.01)] 18 Claims
OG exemplary drawing
 
1. An Internet of Things (IoT) device with zero touch provisioning, the IoT device comprises:
one or more processing devices;
a secure element; and
memory storing software that, when executed in the one or more processing devices, cause the one or more processing devices to:
install, by an IoT device manufacturer, one or more clients on the IoT device for provisioning, enrollment, and updating, based on a device type-based device configuration template generated by a device owner, wherein the one or more clients on the IoT device for provisioning, enrollment, and updating operate with corresponding services with all communicating being encrypted;
store an immutable device identity and a signing certificate in the secure element; and
responsive to the IoT device being powered-on, cause the one or more clients and the secure element to perform the zero touch provisioning of the IoT device, wherein the zero touch provisioning includes
sending the signing certificate from the secure element to an enrollment service for receiving encrypted device configuration therefrom, and
provisioning cryptographic artifacts based on at least the immutable device identifier in the secure element, and storing the cryptographic artifacts in the secure element without a need to manually distribute the cryptographic artifacts thereto.