ESTABLISHING CRYPTOGRAPHIC IDENTITY FOR AN ELECTRONIC DEVICE
A method for establishing a new cryptographic identity for an electronic device comprises providing in the electronic device at least one device key for encryption or decryption of data or commands or for proving the identity of the electronic device according to the new cryptographic identity; and uploading, to a public ledger for tracking a chain of cryptographic identities established for said electronic device, information indicative of an identity of a stakeholder establishing the new cryptographic identity and an order in which the new cryptographic identity was established with respect to other cryptographic identities in said chain.
1 . A method for establishing a new cryptographic identity for an electronic device, the method comprising:
providing in the electronic device at least one device key for encryption or decryption of data or commands or for proving the identity of the electronic device according to the new cryptographic identity; and
uploading, to a public ledger for tracking a chain of cryptographic identities established for said electronic device, information indicative of an identity of a stakeholder establishing the new cryptographic identity and an order in which the new cryptographic identity was established with respect to other cryptographic identities in said chain.
2 . The method of claim 1 , wherein the public ledger comprises a series of blocks of data, and each block of data on the public ledger comprises information dependent on a counter maintained by the electronic device for tracking a number of transactions accepted by the electronic device for establishing the chain of cryptographic identities.
3 . The method of claim 2 , wherein each block of data on the public ledger comprises information dependent on two successive count values of said counter.
4 . The method of claim 1 , wherein said at least one device key is provided in the electronic device in response to acceptance of an ownership taken transaction initiated by the stakeholder establishing the new cryptographic identity.
5 . The method of claim 4 , wherein acceptance of the ownership taken transaction is dependent on certification of the identity of the stakeholder.
6 . The method of claim 4 , wherein acceptance of the ownership taken transaction is dependent on the stakeholder providing a transfer token derived from a previous transaction performed on the electronic device by a previous stakeholder who established a previous cryptographic identity in the chain of cryptographic identities.
7 . The method of claim 6 , wherein the transfer token is stored on the electronic device in a location accessible to the stakeholder establishing the new cryptographic identity.
8 . The method of claim 6 , wherein in response to acceptance of the ownership taken transaction, data binding identity information indicative of the identity of the stakeholder to the transfer token is uploaded to the public ledger.
9 . The method of claim 8 , wherein the electronic device maintains a counter for tracking a number of transactions accepted by the electronic device for establishing the chain of cryptographic identities; and
the data uploaded to the public ledger in response to acceptance of the ownership taken transaction comprises at least:
a first value dependent on the transfer token and a given value of said counter; and
a second value dependent on the identity information and a next value of said counter.
10 . The method of claim 4 , wherein following acceptance of a given ownership taken transaction, acceptance of a subsequent ownership taken transaction is prohibited until after acceptance of an ownership release transaction.
11 . The method of claim 10 , wherein following acceptance of the ownership release transaction, the electronic device is prohibited from using said at least one device key provided in response to said given ownership taken transaction or a previous ownership taken transaction for encryption or decryption of data or commands or for proving the identity of the electronic device until after acceptance of said subsequent ownership taken transaction.
12 . The method of claim 10 , wherein acceptance of the ownership release transaction is dependent on provision of at least one of:
information returned by the electronic device in response to said given ownership taken transaction; and
information for proving that a stakeholder initiating the ownership release transaction is the stakeholder who initiated said given ownership taken transaction.
13 . The method of claim 10 , wherein in response to acceptance of the ownership release transaction, the electronic device returns a transfer token to the stakeholder initiating the ownership release transaction, wherein acceptance of said subsequent ownership taken transaction is dependent on provision of the transfer token to the electronic device.
14 . The method of claim 13 , wherein in response to acceptance of the ownership release transaction, a block of data binding identity information indicative of the identity of the stakeholder who initiated the ownership release transaction to the transfer token generated in response to the ownership release transaction is uploaded to the public ledger.
15 . The method of claim 14 , wherein the electronic device maintains a counter for tracking a number of transactions accepted by the electronic device for establishing the chain of cryptographic identities; and
the data uploaded to the public ledger in response to acceptance of the ownership release transaction comprises at least:
a first value dependent on the identity information and a given value of said counter; and
a second value dependent on the transfer token and a next value of said counter.
16 . The method of claim 13 , wherein the transfer token is generated as a function of a counter for tracking a number of transactions accepted by the electronic device for establishing the chain of cryptographic identities.
17 . The method of claim 10 , wherein in response to acceptance of the ownership release transaction, information for validating the identity of the stakeholder who initiated the most recent ownership taken transaction is uploaded to the public ledger.
18 . A storage medium storing a computer program for controlling an electronic device to perform the method of claim 1 .
19 . An electronic device comprising the storage medium of claim 18 , and processing circuitry to execute the computer program stored in the storage medium.
20 . An electronic device comprising circuitry configured to:
provide in the electronic device at least one device key for encryption or decryption of data or commands or for proving the identity of the electronic device according to a new cryptographic identity; and
upload, to a public ledger for tracking a chain of cryptographic identities established for said electronic device, information indicative of an identity of a stakeholder establishing the new cryptographic identity and an order in which the new cryptographic identity was established with respect to other cryptographic identities in said chain.