Systems and methods of device ownership self-verification

A device configured to perform ownership management comprising:

• a secure memory;
• and
• a processor in communication with the secure memory and configured to perform processing comprising:
• performing processing associated with provisioning at least one of device hardware, software, and firmware with an algorithmic engine including at least one of:
• a digital signature algorithm and an authentication key algorithm,
• at least one of server-provisioned private and public keys, or
• a combination thereof;
• storing one or more private keys and the public keys in the secure memory;
• upon transferring of the device from a current owner to a new owner, wherein a server associated with an owner is provisioned with a pedigree document associated with the device and configured to record a chain of ownership for the device:
• receiving an appended version of the pedigree document that has been appended by the server associated with the owner with a change in ownership from the current owner to the new owner and that is signed with a private key of a current owner in an immutable fashion in response to the transferring of the device to the new owner,
• verifying the pedigree document,
• generating a nonce,
• transmitting the nonce to the server associated with the owner, wherein the server associated with the owner signs the nonce, and
• storing the appended version of the pedigree document in the secure memory;
• and
• verifying the signed nonce received from the server associated with the owner, wherein verification of the signed nonce and the pedigree document enables the device to authenticate the new owner.

A server associated with an owner configured to perform ownership management comprising:

• a memory provisioned with a pedigree document associated with a device configured to record a chain of ownership for the device;
• and
• a processor configured to perform processing comprising:
• receiving, from the device, data indicative of a provisioning of a device processor, at least one of device hardware, software, and firmware provisioned with an algorithmic engine including at least one of:
• a digital signature algorithm and an authentication key algorithm,
• at least one of server-provisioned private keys, public keys, and certificates, or
• a combination thereof,
• wherein the device includes a secure memory and a device processor configured to operate the algorithmic engine, thereby generating a secret derived from the device processor itself, and store one or more private keys and public keys in the secure memory, and wherein the device is transferred from a current owner to a new owner;
• appending a change in ownership, from the current owner to the new owner, to the pedigree document associated with the device that is signed with a private key of a current owner in an immutable fashion in response to the transferring of the device to the new owner, wherein the device is configured to receive the pedigree document that has been appended, verify the pedigree document, generate a nonce, and transmit the nonce to the server associated with the owner;
• and
• sign the nonce,
• wherein the device processor is further configured to verify the signed nonce received from the server associated with the owner, wherein verification of the signed nonce and the pedigree document enables the device to authenticate the new owner.