Remote monitoring and management of an instant issuance system

• US 10,560,438 B2
• Filed: 04/01/2019
• Issued: 02/11/2020
• Est. Priority Date: 06/25/2015
• Status: Active Grant

• Current Assignee: Entrust Datacard Corporation (Entrust Corp.)
• Original Assignee: Entrust Datacard Corporation (Entrust Corp.)
• Inventors: Arora, Vishal, Kullman, Scott, Landerholm, Kent, Zurn, Tim, Wittmayer, Jon, Lemercier, Benoit, Davison, Jeffrey, Sanden, Daniel A.
• Primary Examiner(s): Kanaan, Simon P
• Application Number:
  US16/371,920
• Publication Number:
  US 20190230068A1
• Time in Patent Office: 316 Days
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A system and method for remote monitoring and management of an instant issuance system is provided. The embodiments provide secure communication between different entities within the instant issuance system. Security can be established via mutual authentication between the communicating entities of the instant issuance system prior and/or concurrent with a communication taking place.

Claims

1. An instant issuance system for issuing a customized personalization card, the system comprising:

an instant issuance server component configured to process received customized issuance information and generate printer information to be placed on the customized personalization card;

a customized personalization card printer configured to place printer information received from the instant issuance server component on the customized personalization card; and

a remote management and monitoring (RMM) server component configured to request operational data from at least one of the instant issuance server component and the customized personalization card printer, configured to analyze the requested operational data, configured to determine an operational action, and configured to perform the operational action,

wherein the RMM server component is configured to manage a plurality of certificates for at least one of the instant issuance server component, the RMM server component, and the customized personalization card printer.

2. The instant issuance system of claim 1, wherein the RMM server component is configured to monitor an expiration date for each of the plurality of certificates, automatically distribute a new certificate prior to expiration of any of the plurality of certificates, and distribute the new certificate within the instant issuance system.

3. The instant issuance system of claim 1, wherein the RMM server component is configured to generate a new key pair using asymmetric cryptography, wherein the new key pair is usable for encryption and decryption by two user devices including the customized personalization card printer.

4. The instant issuance system of claim 1, wherein the RMM server component is configured to upload a new user generated key pair, wherein the new key pair is usable for encryption and decryption by two user devices including the customized personalization card printer.

5. The instant issuance system of claim 1, wherein the RMM server component is configured to log activity of the RMM server component, the instant issuance server component and the customized personalization card printer.

6. The instant issuance system of claim 1, wherein the instant issuance system is configured to provide encryption for application specific data communicated between two or more of the instant issuance server component, the customized personalization card printer and the RMM sever component.

7. The instant issuance system of claim 1, wherein the operational data includes information regarding a certificate status and at least one of a ribbon supply level, a cardstock supply, a printer type, a printer status, and a printer location, and

wherein the RMM server component is configured to determine the operational action based on at least one of the ribbon supply level, the cardstock supply, the printer type, the printer status, and the printer location.

8. The instant issuance system of claim 1, wherein the RMM server component is configured to provide a firmware update to the customized personalization card printer based on a geographic location of the customized personalization card printer.

9. The instant issuance system of claim 1, wherein the instant issuance server component and the RMM server component are part of a single server machine.

10. The instant issuance system of claim 1, wherein the customized personalization card is one or more of a customized financial personalization card, a driver'"'"'s license, a government issued card, a government issued badge, and a passport.

11. A method for remote monitoring and management of an instant issuance system that includes a customized personalization card printer, an instant issuance server component and a remote monitoring and management (RMM) server component, the method comprising:

the RMM server component managing a plurality of certificates for at least one of the instant issuance server component, the RMM server component, and the customized personalization card printer;

the RMM server component sending a status request to a first entity;

the first entity gathering requested status information, encrypting the status information, and sending the encrypted status information to the RMM server component;

the RMM server component analyzing the encrypted status information and determining an operational action; and

the RMM server component performing the operational action.

12. The method of claim 11, further comprising the RMM server component monitoring an expiration date for each of the plurality of certificates, automatically distributing a new certificate prior to expiration of any of the plurality of certificates, and distributing the new certificate within the instant issuance system.

13. The method of claim 11, further comprising the RMM server component generating a new key pair using asymmetric cryptography, wherein the new key pair is usable for encryption and decryption by two user devices including the customized personalization card printer.

14. The method of claim 11, further comprising the RMM server component uploading a new user generated key pair, wherein the new key pair is usable for encryption and decryption by two user devices including the customized personalization card printer.

15. The method of claim 11, further comprising the RMM server component logging activity of the RMM server component, the instant issuance server component and the customized personalization card printer.

16. The method of claim 11, wherein the encrypted status information includes operational information regarding a certificate status and at least one of a ribbon supply level, a cardstock supply, a printer type, a printer status, and a printer location, and

wherein the RMM server component determining the operational action based on at least one of the ribbon supply level, the cardstock supply, the printer type, the printer status, and the printer location.

17. The method of claim 11, further comprising the RMM server component providing a firmware update to the customized personalization card printer based on a geographic location of the customized personalization card printer.

18. The method of claim 11, wherein the instant issuance server component and the RMM server component are part of a single server machine.

19. The method of claim 11, wherein the first entity is at least one of a terminal, the customized personalization card printer and the instant issuance server component.

20. The method of claim 11, wherein the customized personalization card is one or more of a customized financial personalization card, a driver'"'"'s license, a government issued card, a government issued badge, and a passport.

21. An instant issuance system for issuing a customized personalization card, the system comprising:

an instant issuance server component configured to process received customized issuance information and generate printer information to be placed on the customized personalization card;

a customized personalization card printer configured to place printer information received from the instant issuance server component on the customized personalization card; and

a remote management and monitoring (RMM) server component configured to request operational data from at least one of the instant issuance server component and the customized personalization card printer, configured to analyze the requested operational data, configured to determine an operational action, and configured to perform the operational action,

wherein the RMM server component is configured to manage a certificate for at least one of the instant issuance server component, the RMM server component, and the customized personalization card printer.

22. The instant issuance system of claim 21, wherein the RMM server component is configured to distribute a new certificate to at least one of the instant issuance server component, the RMM server component, and the customized personalization card printer.