Methods and systems for implementing an anonymized attestation chain
A system for implementing an anonymized attestation chain. The system includes a first device having a first hardware-generated secret and a first verification datum linked to the first hardware-generated secret. The first device is designed and configured to receive an originating signature from an originating device and an originating verification datum. The originating signature includes a secure proof of an originating device secret. The originating signature signs a message referencing the first verification datum, and the originating signature is verified by the originating verification datum. First device generates a first anonymized signature set. The first anonymized signature set includes a modified first verification datum, a modified originating signature, and a modified originating verification datum. First devices delegates the at least a credential to a second verification datum.
1. A method of implementing an anonymized attestation chain, the method comprising:
receiving, at a first device having a first hardware-generated secret and a first verification datum linked to the first hardware-generated secret, an originating signature from an originating device and an originating verification datum, wherein:
the originating signature comprises a secure proof of an originating device secret;
the originating signature signs a message referencing the first verification datum, the message conferring at least a credential to the first device; and
the originating verification datum verifies the originating signature;
generating, by the first device, an anonymized signature set, wherein the anonymized signature set comprises:
a modified first verification datum linked to the first device secret;
a modified originating signature, wherein the modified originating signature comprises a secure proof of the originating device secret, and the modified originating signature signs a modified first message referencing the modified first verification datum; and
a modified originating verification datum based on the originating verification datum, wherein the modified originating verification datum verifies the modified originating signature; and
delegating, by the first device, the at least a credential to a second verification datum, wherein delegating further comprises:
generating a second message conferring the credential to the second verification datum; and
digitally signing the second message using the first device hardware secret.
2. The method of claim 1 , wherein the hardware-generated secret further comprises a secret generated using a physically unclonable function.
3. The method of claim 1 , wherein the originating device further comprises a device operated by a manufacturer of the first device.
4. The method of claim 1 , wherein the credential further includes a time-limited authorization token.
5. The method of claim 1 , wherein receiving the originating signature further comprises retrieving the originating signature from a signature listing.
6. The method of claim 5 , wherein retrieving the originating signature from the signature listing further comprises:
posting first verification datum to the signature listing;
determining that originating device has signed the first verification datum at the signature listing; and
retrieving the originating signature from the signature listing.
7. The method of claim 1 , wherein a second device possessing the modified first verification datum is unable to derive the first verification datum from the modified first verification datum.
8. The method of claim 1 , wherein a second device possessing the modified originating signature is unable to derive the originating signature from the modified originating signature.
9. The method of claim 1 , wherein a second device possessing the modified first message is unable to derive the first message from the modified first message.
10. The method of claim 1 , wherein a second device possessing the modified originating verification datum is unable to derive the originating verification datum from the modified originating verification datum.
11. A system for implementing an anonymized attestation chain, the system comprising a first device having a first hardware-generated secret and a first verification datum linked to the first hardware-generated secret configured to:
receive an originating signature from an originating device and an originating verification datum, wherein:
the originating signature comprises a secure proof of an originating device secret;
the originating signature signs a message referencing the first verification datum, the message conferring at least a credential to the first device; and
the originating verification datum verifies the originating signature;
generate an anonymized signature set, wherein the anonymized signature set comprises:
a modified first verification datum linked to the first device secret;
a modified originating signature, wherein the modified originating signature comprises a secure proof of the originating device secret, and the modified originating signature signs a modified first message referencing the modified first verification datum; and
a modified originating verification datum based on the originating verification datum, wherein the modified originating verification datum verifies the modified originating signature; and
delegate the at least a credential to a second verification datum, wherein delegating further comprises:
generating a second message conferring the credential to the second verification datum; and
digitally signing the second message using the first device hardware secret.
12. The system of claim 11 , wherein the hardware-generated secret further comprises a secret generated using a physically unclonable function.
13. The system of claim 11 , wherein the originating device further comprises a device operated by a manufacturer of the first device.
14. The system of claim 11 , wherein the credential further includes a time-limited authorization token.
15. The system of claim 11 , wherein the first device 104 is further configured to receive the originating signature by retrieving the originating signature from a signature listing.
16. The system of claim 15 , wherein retrieving the originating signature from the signature listing further comprises:
posting first verification datum to the signature listing;
determining that originating device has signed the first verification datum at the signature listing; and
retrieving the originating signature from the signature listing.
17. The system of claim 11 , wherein a second device possessing the modified first verification datum is unable to derive the first verification datum from the modified first verification datum.
18. The system of claim 11 , wherein a second device possessing the modified originating signature is unable to derive the originating signature from the modified originating signature.
19. The system of claim 11 , wherein a second device possessing the modified first message is unable to derive the first message from the modified first message.
20. The system of claim 11 , wherein a second device possessing the modified originating verification datum is unable to derive the originating verification datum from the modified originating verification datum.