SYSTEM AND METHOD FOR MANAGING ELECTRONIC ASSETS

• US 20150309921A1
• Filed: 06/09/2015
• Published: 10/29/2015
• Est. Priority Date: 07/10/2009
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Certicom Corporation (Blackberry Limited)
• Inventors: SMITH, Keelan, JONES, Richard Gwynn, NGUYEN, Chinh Khac, STIEMERLING, Thomas Rudolf
• Granted Patent: US 10,380,007 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/3688 for test execution, e.g. scheduling of test suites
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 8/70 Software maintenance or management
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 50/04 Manufacturing
• CPC Class Codes: Y02P 90/30 Computing systems specially adapted for manufacturing

Abstract

An asset management system is provided which comprises one or more controllers, which operate as main servers and can be located at the headquarters of an electronic device manufacturer to remotely control their operations at any global location. The controller can communicate remotely over the Internet or other network to control one or more secondary or remote servers, herein referred to as appliances. The appliances can be situated at different manufacturing, testing or distribution sites. The controller and appliances comprise hardware security modules (HSMs) to perform sensitive and high trust computations, store sensitive information such as private keys, perform other cryptographic operations, and establish secure connections between components. The HSMs are used to create secure end-points between the controller and the appliance and between the appliance and the secure point of trust in an asset control core embedded in a device.

Claims

1. A method of controlling the distribution of electronic assets to a test application in a manufacturing process, said method comprising:

providing a daemon application programming interface (API) on said test application to provide assets upon detecting a request therefor, and to obtain log data from said test application during testing;

initiating a daemon in connection with said daemon API to obtain said log data from said daemon API and to provide said assets to said daemon API, said daemon hosting an agent API for communicating with an appliance remote to said test application;

utilizing said agent API to obtain a batch comprising a plurality of assets and to provide one or more log reports containing said log data separately from said test application; and

caching said assets to provide a quantity of said assets to said daemon API upon request therefrom to enable said daemon API to provide said assets to said test application thereby avoiding session establishment between said test application and said appliance for obtaining said electronic assets.

2. The method according to claim 1, further comprising:

caching said log reports; and

providing said log reports to said appliance.

3. The method according to claim 1, wherein said daemon API comprises a resource management system for implementing resource management processes and registering said processes with said daemon to indicate when to fetch said assets and send back log data.

4. The method according to claim 3, wherein said resource management system associates said processes by name with a particular product profile.

5. The method according to claim 3, wherein said daemon retains a record of assets not used when said test application terminates.

6. A computer readable medium comprising computer executable instructions that when executed cause one or more computing devices to:

provide a daemon application programming interface (API) on said test application to provide assets upon detecting a request therefor, and to obtain log data from said test application during testing;

initiate a daemon in connection with said daemon API to obtain said log data from said daemon API and to provide said assets to said daemon API, said daemon hosting an agent API for communicating with an appliance remote to said test application;

utilize said agent API to obtain a batch comprising a plurality of assets and to provide one or more log reports containing said log data separately from said test application; and

cache said assets to provide a quantity of said assets to said daemon API upon request therefrom to enable said daemon API to provide said assets to said test application thereby avoiding session establishment between said test application and said appliance for obtaining said electronic assets.

7. The computer readable medium according to claim 6, further comprising:

caching said log reports; and

providing said log reports to said appliance.

8. The computer readable medium according to claim 6, wherein said daemon API comprises a resource management system for implementing resource management processes and registering said processes with said daemon to indicate when to fetch said assets and send back log data.

9. The computer readable medium according to claim 8, wherein said resource management system associates said processes by name with a particular product profile.

10. The computer readable medium according to claim 8, wherein said daemon retains a record of assets not used when said test application terminates.

11. A method for securely communicating between remotely separated modules in an asset management system, said method comprising:

providing at each module in said system, a hardware security module (HSM) for performing sensitive operations within a secure boundary; and

providing in each HSM, a functional module comprising source code for implementing non-traditional operations to protect said operations within said secure boundary.

12. A hardware security module (HSM) comprising:

a secure boundary for performing sensitive operations; and

a functional module comprising source code for implementing non-traditional operations to protect said operations within said secure boundary.

13. A method for distributing electronic assets to devices, said method comprising:

defining a first asset to be added to a device;

defining a second asset to be added to said device;

defining a product type and associating said first and second assets with said product type; and

distributing said first and second assets together for each device associated with said product type.

14. The method according to claim 13, wherein said first asset is one of a serial number, a key, and a feature set.

15. The method according to claim 13, wherein said second asset is one of a serial number, a key, and a feature set.

16. A computer readable medium comprising computer executable instructions that when executed cause a computing device to:

define a first asset to be added to a device;

define a second asset to be added to said device;

define a product type and associating said first and second assets with said product type; and

distribute said first and second assets together for each device associated with said product type.