Secure delivery of assets to a trusted device

A method for managing a software update for a client device coupled to a network, comprising:

• receiving, by a first server device coupled to the network, an asset request from the client device for an asset, the asset request including a cryptographic identifier of the client device;
• in response to receiving the asset request, verifying the client device based, at least in part, on the cryptographic identifier of the client device;
• and
• upon to verifying the client device, providing agreed response signed by the first server device to the client device, the signed response including a storage location for the asset, wherein
• the asset is registered with the first server device by a second server device, the registration including a signed receipt and a storage location for the asset.

A non-transitory, computer-readable storage medium having stored thereon instructions, which, when executed by one or more processors of a first server device coupled to a network, causes the one or more processors to perform operations for managing a software update for a client device coupled to the network, the operations comprising:

• receiving an asset request from the client device for an asset, the asset request including a cryptographic identifier of the client device;
• in response to receiving the asset request, verifying the client device based, at least in part, on the cryptographic identifier of the client device;
• and
• upon verifying the client device, providing a response signed by the first server device to the client device, the signed response including a storage location for the asset wherein
• the asset is registered with the first server device by a second server device, the registration including a signed receipt and the storage location for the asset.