AUTONOMOUS PRIVATE KEY RECOVERY

摘要

Approaches described herein allow a stateless device to recover at least one private key. In particular, a stateless device can provide service-account credentials to a directory service to establish a first session and acquire a certificate and private key using information associated with the stateless device. The stateless device can store its private key before the first session ends. A stateless device can then provide user-account credentials to the directory service to establish a second session. After the second session begins, a private key can be acquired by the stateless device.

主权项

1. A device having one or more processors, the device comprising:
a memory configured to store account credentials; and a stateless machine comprising a certificate distributor configured to:
provide a directory service with the account credentials for establishing a first session;acquire a certificate and a private key using the account credentials and information associated with the stateless machine;store the private key in the directory service before the first session ends;provide the directory service with user-account credentials for establishing a second session, wherein the user-account credentials are associated with a device hosting the stateless machine; andacquire the private key after the second session begins.