Apparatus and methods for management of controlled objects
A lifecycle management system for Controlled Objects is disclosed using a plurality of distinct databases in a plurality of domains. Methods for associating identifiable data records with identifiable Controlled Objects are disclosed. Methods and apparatus are disclosed for authorizing and recording use of a Controlled Object, including pairing of a plurality of Controlled Objects.
1. A method of associating a first identifiable data record and a second identifiable data record, said method comprising:
generating an Association Request by a first Administrator having controlling access to the first identifiable data record, the first Administrator having an associated first public encryption key and a first private encryption key, said Association Request comprising the first public encryption key, and request data defining association parameters, said request data being encrypted with the first private encryption key;
submitting the Association Request to an Authentication
Controller having an associated second public encryption key and a second private encryption key;
decrypting, by the Authentication Controller, using the first public encryption key, the request data comprised in the Association Request;
generating, by the Authentication Controller, a private encryption key set for secure communications referencing the first identifiable record and the second identifiable record, said private encryption key set having a first portion associated with the first identifiable record and a second portion associated with the second identifiable record;
generating by the Authentication Controller responsive to the request data, a first Certificate comprising:
access data for the first and the second identifiable data records, said access data being encrypted using the second private encryption key,
the second public encryption key, and
the first portion of the private encryption key set, being further encrypted using the first public encryption key;
delivering the first Certificate to the first Administrator;
decrypting, by the first Administrator, the access data, using the second public encryption key;
decrypting, by the first Administrator, the first portion of the private encryption key set using the first private encryption key; and
storing by the first Administrator, the decrypted access data and the decrypted first portion of the private encryption key set in a data storage medium accessible only to the first Administrator.
2. The method of claim 1 , said second identifiable data record having a second Administrator, having controlling access to the second identifiable data record, the second Administrator having a third private encryption key and a third public encryption key, said method further comprising:
obtaining, by the Authentication Controller, the third public encryption key from the second Administrator;
generating by the Authentication Controller, responsive to the request data a second Certificate comprising:
access data for first and the second identifiable data records, said access data being encrypted using the second private encryption key,
the second public encryption key, and
the second portion of the rate encryption key set being further encrypted using the third public encryption key;
delivering the second Certificate to the second Administrator;
decrypting, by the second Administrator, the access data, using the second public encryption key;
decrypting by the second Administrator, the second portion of the private encryption key set, using the third private encryption key; and storing, by the second Administrate, the decrypted access data and the decrypted second portion of the private encryption key set in a data storage medium accessible only to the second Administrator.
3. The method of claim 2 , wherein the first portion of the private encryption key set is identical to the second portion of the private encryption key set.
4. The method of claim 2 , said method further comprising subsequent to delivering the first Certificate to the first Administrator and subsequent to delivering the second Certificate to the second Administrator:
encrypting a secure message by the originating one of the first Administrator and the second Administrator, utilizing the portion of the private encryption key set stored by the originating Administrator;
transmitting the secure message by the originating one of the first Administrator and the second Administrator to the receiving one of the first Administrator and the second Administrator;
decrypting the secure message by the receiving one of the first Administrator and the second Administrator, utilizing the portion of the private encryption key set stored by the receiving Administrator.
5. The method of claim 1 , wherein at least one of the first identifiable data record and the second identifiable data record is a Non Fungible Token (NFT).