IP Library › Granted Patent US 9,137,016
Granted Patent B2
US 9,137,016 · App. 13/923,340 · Granted Sep 15, 2015

Key pair updates based on digital signature states

Inventors: Todd Eric Blanchard (Vancouver, WA); Rowdy K Webb (Portland, OR); Laurent Pizot (Vancouver, WA)
Assignee: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
H04L9/0891H04L9/0825H04L9/3247
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,137,016
App. No.
13/923,340
Granted
Sep 15, 2015
Kind
B2
Abstract

Example embodiments relate to updating key pairs based on digital signature states. In example embodiments, first credentials that are generated using a first private key may be sent to a user computing device, where the first private key is associated with a first public key. At some stage, second credentials that are generated using the first private key and a second private key are sent to the user computing device, where the second credentials specify that the first private key is deprecated, and where the user computing device authenticates the second credentials using the first public key. In response to receiving confirmation that a firmware upgrade is installed a number of user computing devices such that an upgrade threshold is satisfied, the first private key may be deactivated. The firmware upgrade may be provided in response to receiving a firmware upgrade request from the user computing device.

Claims (44)

1. A system for updating key pairs based on digital signature states, the system comprising:

an interface module to:

send first credentials that are signed by a first private key to a user computing device, wherein the first private key is associated with a first public key; and

send second credentials to the user computing device, wherein the user computing device authenticates the second credentials using the first public key; and

a key management module to:

monitor an upgrade threshold that is satisfied when a firmware upgrade is installed on the user computing device and a plurality of user computing devices;

in response to determining that the upgrade threshold is not satisfied, generate the second credentials that are signed by the first private key and a second private key, wherein the second credentials specify that the first private key is deprecated; and

in response to determining the upgrade threshold is satisfied, deactivate the first private key; and

wherein in response to a firmware upgrade request from the user computing device, the firmware upgrade comprising a second public key that is associated with the second private key is provided to the user computing device.

2. The system of claim 1 , wherein the key management module is further to:

generate, in response to determining that the first private key has been compromised, the second private key and the second public key.

3. The system of claim 1 , wherein the user computing device is a printing device, and wherein the first credentials specify a quantity of printing services that the printing device is authorized to provide.

4. The system of claim 3 , wherein the interface module is further to:

receive a first device status message that includes printing statistics and a first public key identifier that is associated with the first public key, wherein the quantity of printing services is determined based on the printing statistics.

5. The system of claim 4 , wherein the confirmation that the firmware upgrade is installed is included in a second device message as a second public key identifier that is associated with the second public key.

6. The system of claim 1 , wherein the key management module is further to:

destroy the first private key, wherein the first public key is destroyed on the user computing device and the plurality of user computing devices.

7. A method for updating key pairs based on digital signature states, the method comprising:

sending first credentials that are signed by a first private key to a printing device, wherein the first private key is associated with a first public key, and wherein the first credentials specify a quantity of printing services that the printing device is authorized to provide;

monitoring an upgrade threshold that is satisfied when a firmware upgrade is installed on the printing device and a plurality of printing devices;

in response to determining that the upgrade threshold is not satisfied, generating second credentials that are signed by the first private key and a second private key, wherein the second credentials specify that the first private key is deprecated;

sending the second credentials to the printing device, wherein the printing device authenticates the second credentials using the first public key;

sending a second public key that is associated with the second private key to an upgrade server, wherein the upgrade server is to provide the firmware upgrade that includes the second public key; and

in response to determining that the upgrade threshold is satisfied, deactivating the first private key.

8. The method of claim 7 , further comprising:

in response to determining that the first private key has been compromised, generating the second private key and the second public key.

9. The method of claim 7 , further comprising:

receiving a first device status message that includes printing statistics and a first public key identifier that is associated with the first public key, wherein the quantity of printing services is determined based on the printing statistics.

10. The method of claim 9 , wherein the confirmation that the firmware upgrade is installed is included in a second device message as a second public key identifier that is associated with the second public key.

11. The method of claim 7 , further comprising:

destroying the first private key, wherein the first public key is destroyed on the printing device and the plurality of printing devices.

12. A non-transitory machine-readable storage medium encoded with instructions executable by a processor for updating key pairs based on digital signature states, the machine-readable storage medium comprising:

instructions to receive a first device status message that includes printing statistics and a first public key identifier that is associated with a first public key, wherein the printing statistics are used to determine a quantity of printing services that a printing device is authorized to provide;

instructions to send first credentials that are signed by a first private key to the printing device, wherein the first private key is associated with the first public key, and wherein the first credentials specify the quantity of printing services;

instructions to monitor an upgrade threshold that is satisfied when a firmware upgrade is installed on the printing device and a plurality of printing devices;

instructions to generate, in response to determining that the upgrade threshold is not satisfied, second credentials that are signed by the first private key and a second private key, wherein the second credentials specify that the first private key is deprecated; and

instructions to send the second credentials to the printing device, wherein the printing device authenticates the second credentials using the first public key;

instructions to send a second public key that is associated with the second private key to an upgrade server, wherein the upgrade server is to provide the firmware upgrade that includes the second public key; and

instructions to deactivate, in response to determining that the upgrade threshold is satisfied, the first private key.

13. The storage medium of claim 12 , further comprising instructions to:

generate, in response to determining that the first private key has been compromised, the second private key and the second public key.

14. The storage medium of claim 12 , wherein the confirmation that the firmware upgrade is installed is included in a second device message as a second public key identifier that is associated with the second public key.

15. The storage medium of claim 12 , further comprising instructions to:

destroy the first private key, wherein the first public key is destroyed on the printing device and the plurality of printing devices.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 11, 2013
From: BLANCHARD, TODD ERIC; WEBB, ROWDY K; PIZOT, LAURENT
To: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
Reel/Frame 030782/0047 →
Continuity (1)
Related Publication 20140380055A1 · Dec 25, 2014