Ownership Transfer via Intermediate Public Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device ownership transfer procedures face security threats and scalability challenges, particularly when transferring ownership from one entity to another, as they involve direct interactions and potential man-in-the-middle attacks, which can compromise the security of both the original and new owners.
Innovation Solution
A device ownership transfer system that allows secure transfer of ownership by loading intermediate Root of Trust (ROT) credentials signed by the first owner, removing sensitive data, and using secure channels to minimize direct interaction, with verification and measurement protocols to ensure integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If direct interaction between first owner and second owner is maintained during ownership transfer, then security verification can be performed, but security threats such as man-in-the-middle attacks increase
Solution Approach 1:
The patent introduces an intermediate public key as a mediator in the ownership transfer process. The intermediate public key serves as a temporary credential that enables the second owner to verify ownership transfer without requiring direct interaction with the first owner, thus eliminating man-in-the-middle attack vectors while maintaining security verification integrity
Solution Approach 2:
The ownership transfer process is segmented into distinct cryptographic stages: the first owner's credentials are separated from the second owner's verification process through the introduction of an intermediate public key. This segmentation allows independent verification without direct communication between original owner and new owner
2Reliability
If multiple signing services are involved in ownership transfer, then security is improved through multiple verification layers, but device complexity increases
Solution Approach 1:
The first owner's signing service performs preliminary action by signing the intermediate public key in advance. This pre-signed intermediate public key is then stored in the device, enabling the second owner's signing service to verify ownership transfer without requiring real-time coordination with the first owner's signing service, thus reducing operational complexity
Data Source
AI summary
In one embodiment, a device includes a memory to store a first public key indicating security ownership of the device by a first owner, an interface to receive a signature of an intermediate public key signed by a first owner signing service with a first private key, and processing circuitry to load the intermediate public key in the memory, responsively to authenticating the signature, and remove the first public key from the memory, and wherein the interface is to receive a second public key and a signature of the second public key signed by a second owner signing service with an intermediate private key, the processing circuitry is to load a second public key in the memory indicating ownership has been transferred to the second owner responsively to authenticating the signature of the second public key with the intermediate public key, and remove the intermediate public key from the memory.