Using PKI for security and authentication of control devices and their data
Method for authenticating a first and a second electronic devices associated through a communication line includes: creating a unique ID, by a third electronic device; transmitting the unique ID to the first electronic device; signing the transmitted unique ID by the first electronic device; transmitting the signed unique ID to the second electronic device, by the first electronic device; signing the transmitted signed unique ID by the second electronic device; transmitting the unique ID signed by the first and second electronic devices to the third electronic device; verifying and accepting the unique ID signed by the first device and the second device, by the third device; issuing a certificate for a secure communication line between the first electronic device and the second electronic device; and transmitting the certificate to the first electronic device and the second electronic device.
1. A method for associated through a communication line a first electronic device and a second electronic device, the method comprising:
creating a unique identification (ID), by a third electronic device;
transmitting the unique ID to the first electronic device;
signing the transmitted unique ID by the first electronic device;
transmitting the signed unique ID to the second electronic device, by the first electronic device;
signing the transmitted signed unique ID by the second electronic device;
transmitting the unique ID signed by the first and second electronic devices to the third electronic device;
verifying and accepting the unique ID signed by the first electronic device and the second electronic device, by the third electronic device;
issuing a certificate for a secure communication line between the first electronic device and the second electronic device; and
transmitting the certificate to the first electronic device and the second electronic device.
2. The method of claim 1 , wherein the third electronic device is an Attribute Authority (AA).
3. The method of claim 1 , wherein the third electronic device includes an artificial intelligence software for processing of the unique ID and issuing the certificate.
4. The method of claim 1 , further comprising inviting the second electronic device by the first electronic device by sending an invitation including a digital identity token (DIT) with a signed request to the second electronic device.
5. The method of claim 4 , wherein the invitation further includes a digital agreement.
6. The method of claim 5 , wherein the digital agreement includes rules and business logic to provide actions to be taken by the first electronic device or the second electronic device.
7. The method of claim 6 , wherein the first electronic device, the second electronic device or the third electronic device is capable of revising the rules and business logic.
8. The method of claim 4 , further comprising transmitting a response to said invitation by the second electronic device, wherein said response includes a signature generated by using a private key that corresponds to a public key, with a second Digital Identity Token.
9. The method of claim 8 , wherein the public key is within said certificate issued for the secure communication line.
10. The method of claim 1 , further comprising grouping the first electronic device, the second electronic device and the plurality of more electronic devices into different groups based on a predetermined criteria, wherein grouping the electronic devices includes group membership and a plurality of associated rules in a respective certificate issued to a respective communication line.
11. The method of claim 1 , further comprising preventing other electronic device for which a secure communication line to the first or second electronic device has not been established from communicating with the first or second electronic device.
12. The method of claim 1 , wherein the first electronic device and the second electronic device are Internet of Things (IoT) devices.
13. The method of claim 1 , wherein the first and second electronic devices are components of an automobile, an oil pump, a household appliance, an aircraft, a medical device, an electrical grid, a smart city, or a military weapon or system.
14. The method of claim 1 , wherein the certificate includes rules and business logic for the first electronic device or the second electronic device.
15. The method of claim 14 , wherein the rules and business logic are transmitted to the first electronic device or the second electronic device via a binary file or a text file.