Authenticating digitally encoded products without private key sharing

A data processing structure comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory comprises in instructions which, when executed by the processor, cause the processor to:
• receive a request of authentication of a product that includes a request to invoke a remote command for satisfying the request of authentication from a client system,
• verify whether the request of authentication is received from an authorized subject, and
• responsive to a positive verification that the request is received from an authorized subject:
• verify whether the remote command is included in a predefined list stored on the data processing structure, wherein the list includes at least one remote command for satisfying the request of authentication, and
• responsive to the remote command being included in the predefined list, execute the remote command by:
• certifying that the product originates from an entity having at least one authorized subject using sensitive information of the entity stored on the data processing structure, and returning a representation of the certification to the client system.

A data processing structure comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:
• receive a request of authentication of a product that includes a request to invoke a remote command for satisfying the request of authentication from a client system;
• verify whether the request of authentication is received from an authorized subject;
• and
• responsive to a positive verification that the request is received from an authorized subject:
• verify whether the remote command is included in a predefined list stored on the data processing structure, wherein the list includes at least one remote command for satisfying the request of authentication, and
• responsive to the remote command being included in the predefined list, execute the remote command by:
• generating a digital signature of the product using a private key of the entity stored on the data processing structure;
• and
• returning the digital signature to the client system, wherein the digital signature certifies that the product originates from the entity.

A computer program product comprising a computer readable storage device on which a computer readable program is stored, wherein the computer readable program, when executed on a data processing structure, causes the data processing structure to:

• receive a request of authentication of a product that includes a request to invoke a remote command for satisfying the request of authentication from a client system;
• verify whether the request of authentication is received from an authorized subject;
• and
• responsive to a positive verification that the request is received from an authorized subject:
• verify whether the remote command is included in a predefined list stored on the data processing structure, wherein the list includes at least one remote command for satisfying the request of authentication, and
• responsive to the remote command being included in the predefined list, execute the remote command by:
• generating a digital signature of the product using a private key of the entity stored on the data processing structure;
• and
• returning the digital signature to the client system, wherein the digital signature certifies that the product originates from the entity.