Values exclusions
AssigneeHewlett-Packard Development Company, L.P.
InventorsThalia May Laing, Maugan Villatel, Adrian John Baldwin, Pierre Louis Robert Belgarric, Adrian Laurence Shaw
Life of this patent
Estimating the term…
Abstract
In an example, a computing device is described. The computing device comprises a processor. The processor is to generate a key using a value as an input to generate the key. The processor is further to, in response to generating the key, exclude the value from future use as the input. The processor is further to store an indication of a subsequent value to use as the input to generate a subsequent key. The indication is cryptographically associated with an entity to control third-party access to the indication.
Claims20
A computing device comprising:
- a processor to:
- generate a key using a value as an input to generate the key;
- in response to generating the key, exclude the value from future use as the input;
- store an indication of a subsequent value to use as the input to generate a subsequent key in a dedicated memory, wherein the indication is cryptographically associated with an entity to control third-party access to the indication;
- and
- upon failure of the computing device, allow the entity to access the indication via the dedicated memory such that the entity can verify the subsequent value and allow a second computing device to generate the subsequent key using the subsequent value.
A computing device comprising:
- a processor to:
- generate a key, wherein the key is based on a value used as an input to generate the key, wherein the value is determined from data stored in a dedicated memory of the computing device, wherein the value is excluded from future use as the input as a result of the processor generating the key, and wherein the data comprises an authorization portion to facilitate authorization of third-party access to the data by an entity with a cryptographic link to the authorization portion;
- instruct update of the data to indicate that an available value that has not been excluded from future use is to be used as the input next time a new key is to be generated;
- and
- upon failure of the computing device, allow the entity to access the data via the cryptographic link such that the entity can verify the available value and allow a second computing device to generate the new key using the available value as the input.
A non-transitory machine-readable medium storing instructions readable and executable by a processor of a computing device to:
- verify data stored in a dedicated memory of a first signer based on a cryptographic association between the first signer and the computing device upon failure of the first signer, wherein the data is indicative of a value to use as an input to generate a one-time use key that is based on the value, and wherein the value has not been excluded from future use as the input by the first signer;
- and
- authorize a second signer to store the value in response to verifying the data such that the second signer can use the value as the input to generate the one-time use key.
Dependencies are inferred from the claim text.