Secure process for device registration with a service

A computing apparatus comprising:

• one or more computer-readable storage media;
• one or more processors operatively coupled with the one or more computer-readable storage media;
• and
• program instructions stored on the one or more computer-readable storage media that, when executed by the one or more processors, direct the computing apparatus to:
• receive, from a user device, a request to begin a registration process to register the user device with a service, wherein the request includes registration data and a public key of an asymmetric key pair;
• store the public key in association with a session identifier;
• send the session identifier to the user device;
• receive, from the user device, a later request to continue the registration process, wherein the later request includes the session identifier and a digital signature created using a private key of the asymmetric key pair;
• authenticate the digital signature of the later request based on the public key, wherein the public key is retrieved based on the session identifier;
• send the registration data associated with the later request to the user device;
• and
• register the user device with the service based on the registration data.

A method of registering a user device with a service, the method comprising:

• sending, by the user device, a request to the service to begin a registration process to register the user device with the service, wherein the request includes registration data and a public key of an asymmetric key pair;
• receiving, by the user device, a session identifier from the service;
• sending, by the user device, a later request to the service to continue the registration process, wherein the later request includes the session identifier and a digital signature created using a private key of the asymmetric key pair;
• and
• receiving, by the user device, registration data associated with the later request from the service.