Bootstrapping without transferring private key
AssigneeArm Limited
InventorsSzymon Sasin, Norbert David, Yongbeom Pak
Life of this patent
Estimating the term…
Abstract
A machine implemented method of communication between server and remote device, the method comprising: determining an availability and address of the remote device on a network for communication with the server; obtaining a public key attributed to the remote device; signing the public key attributed to the remote device with a private key of the server and so generating a digitally signed certificate to verify the ownership of the public key as the remote device; and transmitting the digitally signed certificate to the remote device.
Claims17
A machine implemented method of bootstrap communication, the method comprising:
- at a bootstrap server, receiving a request to begin an authentication process for a remote device, the authentication process including obtaining a public key stored at the remote device;
- authenticating the remote device;
- signing the obtained public key with a private key of the bootstrap server and so generating a digitally signed certificate to verify the ownership of the public key as the remote device;
- and
- transmitting the digitally signed certificate to the remote device at which a private key is stored, the public key and the private key stored at the remote device being part of an asymmetric key pair.
A hardware apparatus for receiving a bootstrap request at a bootstrap server, the hardware apparatus comprising:
- an input for receiving the bootstrap request;
- a processor configured to:
- authenticate the remote device;
- obtain a public key stored on the remote device;
- and
- create a digitally signed certificate to verify the owner of the obtained public key as the remote device, wherein the digitally signed certificate is created by signing the obtained public key with a private key of the apparatus;
- and
- communication circuitry configured to transmit the digitally signed certificate to the remote device;
- wherein the bootstrapping occurs without transferring a private key from the remote device, by utilizing the remote device comprising a private key at which the private key is stored, the public key and the private key being part of an asymmetric key pair.
A system for enabling communication between server and remote device, the system comprising:
- at least one remote device associated with a public key;
- a hardware apparatus for receiving a bootstrap request from the at least one remote device;
- and
- a server;
- wherein the hardware apparatus is configured to:
- sign the public key associated with the remote device with a private key of the apparatus and so generate a digitally signed certificate to verify the ownership of the public key as the remote device;
- and
- transmit the digitally signed certificate to the remote device;
- wherein the remote device is configured to:
- receive the digitally signed certificate from the apparatus;
- store the digitally signed certificate for use as its digitally signed public key certificate;
- and
- transmit the digitally signed public key certificate to the server;
- and
- wherein the server is configured to:
- receive the digitally signed public key certificate from the remote device;
- and
- use the received digitally signed public key certificate to authenticate the remote device.
Dependencies are inferred from the claim text.