Key diversification in a tracking device environment
A tracking device can use a permanent encryption key pair to encrypt a temporary private key that corresponds to a set of diversified temporary public keys. When a community mobile device subsequently detects the tracking device, the central tracking system provides a diversified temporary public key to the community mobile device. The community mobile device uses the diversified temporary public key to encrypt location data representative of a location of the community mobile device, and provides the encrypted location data to the central tracking system. When a user subsequently requests a location of the tracking device from the central tracking system, the central tracking system provides the encrypted temporary private key and the encrypted location data to a device of the user, and the device can decrypt the encrypted temporary private key using the permanent encryption key pair, and decrypt the encrypted location data using the decrypted temporary private key.
1. A method comprising:
generating, for a tracking device, a permanent encryption key pair comprising a permanent public key and a permanent private key, the tracking device associated with a unique identifier;
generating a temporary private key and a corresponding set of diversified temporary public keys;
encrypting the temporary private key using the permanent public key;
providing, by a central tracking system to a community mobile device, a diversified temporary public key associated with a hash key used to create a hashed identifier received by the community mobile device from the tracking device, the community mobile device configured to encrypt location data associated with the tracking device using the diversified temporary public key and to provide the encrypted location data to the central tracking system; and
in response to receiving a request for a location of the tracking device, providing, by the central tracking system, the encrypted temporary private key and the encrypted location data to an owner mobile device, the owner mobile device configured to decrypt the encrypted location data using the encrypted temporary private key and the permanent private key and display the decrypted location data.
2. The method of claim 1 , wherein the set of diversified temporary public keys are generated using an Elgamal encryption operation.
3. The method of claim 1 , wherein the set of diversified temporary public keys are generated using an ECIES encryption operation.
4. The method of claim 1 , wherein the set of diversified temporary public keys are generated using a NaCl encryption operation.
5. The method of claim 1 , wherein the set of diversified temporary public keys are generated using a set of elliptical curves.
6. The method of claim 1 , wherein the temporary private key can decrypt the location data encrypted with any of the set of diversified temporary public keys.
7. The method of claim 1 , wherein the permanent encryption key pair is generated by one of the owner mobile device and the central tracking system.
8. The method of claim 1 , wherein the permanent encryption key pair is generated in response to activating the tracking device.
9. The method of claim 1 , wherein the tracking device is configured to include the hashed identifier in an advertising packet transmitted by the tracking device.
10. The method of claim 1 , wherein the community mobile device, in response to receiving the hashed identifier from the tracking device, is configured to activate a GPS receiver of the community mobile device and to determine a location of the community mobile device using the GPS receiver, the determined location comprising the location data.
11. The method of claim 1 , wherein the central tracking system does not have access to the permanent private key.
12. The method of claim 1 , wherein the central tracking system does not have access to the decrypted temporary private key.
13. The method of claim 1 , wherein the central tracking system is unable to decrypt the encrypted location data.
14. The method of claim 1 , wherein displaying the decrypted location data comprises displaying the location of the tracking device within a map interface.
15. The method of claim 1 , wherein displaying the decrypted location data comprises displaying a notification via an operating system of the owner mobile device.
16. A non-transitory computer-readable storage medium storing executable instructions that, when executed by a hardware processor, cause the hardware processor to perform steps comprising:
generating, for a tracking device, a permanent encryption key pair comprising a permanent public key and a permanent private key, the tracking device associated with a unique identifier;
generating a temporary private key and a corresponding set of diversified temporary public keys;
encrypting the temporary private key using the permanent public key;
providing, by a central tracking system to a community mobile device, a diversified temporary public key associated with a hash key used to create a hashed identifier received by the community mobile device from the tracking device, the community mobile device configured to encrypt location data associated with the tracking device using the diversified temporary public key and to provide the encrypted location data to the central tracking system; and
in response to receiving a request for a location of the tracking device, providing, by the central tracking system, the encrypted temporary private key and the encrypted location data to an owner mobile device, the owner mobile device configured to decrypt the encrypted location data using the encrypted temporary private key and the permanent private key and display the decrypted location data.
17. The non-transitory computer-readable storage medium of claim 16 , wherein the community mobile device, in response to receiving the hashed identifier from the tracking device, is configured to activate a GPS receiver of the community mobile device and to determine a location of the community mobile device using the GPS receiver, the determined location comprising the location data.
18. The non-transitory computer-readable storage medium of claim 16 , wherein displaying the decrypted location data comprises displaying the location of the tracking device within a map interface.
19. The non-transitory computer-readable storage medium of claim 16 , wherein displaying the decrypted location data comprises displaying a notification via an operating system of the owner mobile device.
20. A system comprising:
a hardware processor; and
a non-transitory computer-readable storage medium storing executable instructions that, when executed by the hardware processor, cause the hardware processor to perform steps comprising:
generating, for a tracking device, a permanent encryption key pair comprising a permanent public key and a permanent private key, the tracking device associated with a unique identifier;
generating a temporary private key and a corresponding set of diversified temporary public keys;
encrypting the temporary private key using the permanent public key;
providing, by a central tracking system to a community mobile device, a diversified temporary public key associated with a hash key used to create a hashed identifier received by the community mobile device from the tracking device, the community mobile device configured to encrypt location data associated with the tracking device using the diversified temporary public key and to provide the encrypted location data to the central tracking system; and
in response to receiving a request for a location of the tracking device, providing, by the central tracking system, the encrypted temporary private key and the encrypted location data to an owner mobile device, the owner mobile device configured to decrypt the encrypted location data using the encrypted temporary private key and the permanent private key and display the decrypted location data.