Key pair updates based on digital signature states

摘要

Example embodiments relate to updating key pairs based on digital signature states. In example embodiments, first credentials that are generated using a first private key may be sent to a user computing device, where the first private key is associated with a first public key. At some stage, second credentials that are generated using the first private key and a second private key are sent to the user computing device, where the second credentials specify that the first private key is deprecated, and where the user computing device authenticates the second credentials using the first public key. In response to receiving confirmation that a firmware upgrade is installed a number of user computing devices such that an upgrade threshold is satisfied, the first private key may be deactivated. The firmware upgrade may be provided in response to receiving a firmware upgrade request from the user computing device.

主权项

1. A system for updating key pairs based on digital signature states, the system comprising:
an interface module to:
send first credentials that are signed by a first private key to a user computing device, wherein the first private key is associated with a first public key; andsend second credentials to the user computing device, wherein the user computing device authenticates the second credentials using the first public key; and a key management module to:
monitor an upgrade threshold that is satisfied when a firmware upgrade is installed on the user computing device and a plurality of user computing devices;in response to determining that the upgrade threshold is not satisfied, generate the second credentials that are signed by the first private key and a second private key, wherein the second credentials specify that the first private key is deprecated; andin response to determining the upgrade threshold is satisfied, deactivate the first private key; and wherein in response to a firmware upgrade request from the user computing device, the firmware upgrade comprising a second public key that is associated with the second private key is provided to the user computing device.