METHOD AND APPARATUS TO BIND A KEY TO A NAMESPACE

摘要

A method includes identifying an application installed on a device as an authorized application of a certain domain, the application being signed with a private key (7A); deriving a signer identity using a public key that forms a key pair with the private key (7B); mapping the certain domain to another domain using a deterministic function map (7C); making a request to the another domain to obtain a list of signer identities that are authorized to act on behalf of the certain domain (7D); determining whether the signer of the application is in the list and, if it is, authorizing the application to act with the same privileges as granted in the certain domain (7E). Apparatus and computer programs for performing the method are also disclosed.