CPC H04L 9/3073 (2013.01) [H04L 9/0866 (2013.01); H04L 9/3234 (2013.01); H04L 9/3265 (2013.01); H04L 9/3268 (2013.01); H04L 9/0877 (2013.01); H04L 9/50 (2022.05)] | 14 Claims |
1. A device comprising:
a hardware backed key store configured to:
based on a device private key of a device key pair, sign a first attestation resulting in a signed first attestation, the first attestation claiming the device private key originated from a hardware backed key store;
based on the device private key, sign a second attestation resulting in a signed second attestation, the second attestation claiming a first application private key of a first application key pair originated from the hardware backed key store;
communications circuitry configured to:
based on a device public key of the device key pair and the signed first attestation, register the device with a trusted authority;
based on a first application public key of the first application key pair and the signed second attestation, register a first application of the device to a first server; and
receive, from the trusted authority, a certificate attesting the device private key originated from the hardware backed key store.
|