Key diversification in a tracking device environment

A non-transitory computer-readable storage medium storing executable instructions that, when executed by a hardware processor, cause the hardware processor to perform steps comprising:

• generating, for a tracking device, a permanent encryption key pair comprising a permanent public key and a permanent private key, the tracking device associated with a set of hash keys and a unique identifier;
• generating a temporary private key and a corresponding set of diversified temporary public keys;
• encrypting the temporary private key using the permanent public key;
• storing the encrypted temporary private key and the set of diversified temporary public keys by a central tracking system, the central tracking system configured to associate each diversified temporary public key of the set of diversified temporary public keys with a different hash key of the set of hash keys;
• providing, by the central tracking system to a community mobile device, a diversified temporary public key associated with a hash key used to create a hashed identifier received by the community mobile device from the tracking device, the community mobile device configured to encrypt location data associated with the tracking device using the diversified temporary public key and to provide the encrypted location data to the central tracking system;
• in response to receiving a request for a location of the tracking device, providing, by the central tracking system, the encrypted temporary private key and the encrypted location data to an owner mobile device, the owner mobile device configured to 1) decrypt the received encrypted temporary private key using the permanent private key, 2) decrypt the encrypted location data using the decrypted temporary private key, and 3) display the decrypted location data.

A system comprising:

• a hardware processor;
• and a non-transitory computer-readable storage medium storing executable instructions that, when executed by the hardware processor, cause the hardware processor to perform steps comprising:
• generating, for a tracking device, a permanent encryption key pair comprising a permanent public key and a permanent private key, the tracking device associated with a set of hash keys and a unique identifier;
• generating a temporary private key and a corresponding set of diversified temporary public keys;
• encrypting the temporary private key using the permanent public key;
• storing the encrypted temporary private key and the set of diversified temporary public keys by a processor of a central tracking system, the processor of the central tracking system configured to associate each diversified temporary public key of the set of diversified temporary public keys with a different hash key of the set of hash keys;
• providing, by the processor of the central tracking system to a community mobile device, a diversified temporary public key associated with a hash key used to create a hashed identifier received by the community mobile device from the tracking device, the community mobile device configured to encrypt location data associated with the tracking device using the diversified temporary public key and to provide the encrypted location data to the central tracking system;
• in response to receiving a request for a location of the tracking device, providing, by the processor of the central tracking system, the encrypted temporary private key and the encrypted location data to an owner mobile device, the owner mobile device configured to
• 1) decrypt the received encrypted temporary private key using the permanent private key,
• 2) decrypt the encrypted location data using the decrypted temporary private key, and
• 3) display the decrypted location data.