Application certificate
AssigneeTrustonic Limited
InventorsChris Loreskar, John Dent
Life of this patent
Estimating the term…
Abstract
A method for a device comprises enrolling a specified application installed on the device into a chain of trust provided by a private key infrastructure. In the chain of trust, a child certificate is attested as valid by an attestor associated with a parent certificate in the chain of trust. Enrolling includes generating an application certificate 20-A for verifying that the specified application is installed on the device 2. The application certificate is a descendant certificate of the device certificate associated with the device and the chain of trust.
Claims23
A method for a device, the method comprising:
- determining, in dependence on at least one device permission or constraint defined for the device, whether the device is allowed to enrol a specified application installed on the device into a chain of trust provided by a public key infrastructure,
- wherein in the chain of trust, a child certificate is attested as valid by an attestor associated with a parent certificate in the chain of trust, and wherein the root of the chain of trust is a root certifying authority which is external to the device;
- and
- enrolling, when it is determined that the device is allowed to enrol the specified application into the chain of trust, the specified application into the chain of trust;
- wherein the enrolling comprises generating an application certificate for verifying that the specified application is installed on the device;
- and
- the application certificate is a descendant certificate of a device certificate of the device.
A device comprising:
- a device memory, and
- processing circuitry configured to:
- determine, in dependence on at least one device permission or constraint defined for the device, whether the device is allowed to enrol a specified application installed on the device memory into a chain of trust provided by a public key infrastructure,
- wherein in the chain of trust, a child certificate is attested as valid by an attestor associated with a parent certificate in the chain of trust, and wherein the root of the chain of trust is a root certifying authority which is external to the device;
- enrol, when it is determined that the device is allowed to enrol the specified application into the chain of trust, the specified application into the chain of trust;
- wherein enrolling of the specified application comprises generating an application certificate for verifying that the specified application is installed on the device memory;
- and
- wherein the application certificate is a descendant certificate of a device certificate of the device.
Dependencies are inferred from the claim text.