Chain of trust identification system and method
Embodiments of a system and method for creating a chain of trust are generally described herein. A method may include generating a private secret value, determining a public test value using the private secret value, sending, from a first device in a trusted environment with a second device and a third device, the public test value to the second device, receiving, at the first device outside the trusted environment, a challenge from the third device, determining a verification to the challenge using the private secret value, sending, from the first device outside the trusted environment, the verification to the second device, and receiving, at the first device outside the trusted environment, confirmation from the third device that the verification was successfully verified by the second device and the third device.
1. At least one non-transitory machine readable medium including instructions that, when executed by a first device, cause the first device to perform operations for creating a chain of trust, the operations comprising:
sending, from the first device in a trusted environment with a second device and a third device, a public test value, determined using a private secret value, directly to the second device;
directly receiving, at the first device outside the trusted environment, a challenge from the third device, the third device in communication with the second device, the third device having received a test value from the second device, and the challenge generated in response to receiving the test value, the test value generated by the second device by modifying the public test value sent to the second device from the first device;
determining a verification to the challenge using the private secret value;
sending directly, from the first device outside the trusted environment, the verification to the second device;
directly receiving, at the first device outside the trusted environment, a confirmation from the third device that the verification was successfully verified by the second device and the third device; and
sending a secure communication to the third device via the second device after receiving the confirmation.
2. The machine readable medium of claim 1 , wherein the public test value and the verification are determined using a modulus value, the modulus value including a product of two distinct prime numbers.
3. The machine readable medium of claim 1 , wherein sending the verification to the second device includes sending a second public test value to the second device.
4. The machine readable medium of claim 3 , wherein receiving the confirmation from the third device includes receiving a second challenge from the third device.
5. The machine readable medium of claim 4 , the operations further comprising:
determining, in response to receiving the second challenge, a second verification to the second challenge using a second private secret value; and
sending the second verification to the second device.
6. The machine readable medium of claim 1 , wherein receiving the confirmation from the third device includes receiving the confirmation from the third device that the verification was successfully verified by a fourth device, and wherein the third device is in communication with the second device via the fourth device.
7. The machine readable medium of claim 1 , wherein the first device is an Internet of Things wearable device.
8. The machine readable medium of claim 1 , wherein the trusted environment includes an institute of Electrical and Electronics Engineers (IEEE) 802.11 wireless network.
9. The machine readable medium of claim 8 , wherein receiving, at the first device outside the trusted environment, the challenge from the third device includes receiving the challenge over an unsecured network.
10. A first device for establishing a chain of trust, the first device in a trusted environment with a second device and a third device, and the first device comprising:
transceiver logic, implemented at least partly in hardware, to:
send a public test value, determined using a private secret value, directly to the second device;
directly receive, at the first device outside the trusted environment, a challenge from the third device, the third device in communication with the second device, the third device having received a test value from the second device, and the challenge generated in response to receiving the test value, the test value generated by the second device by modifying the public test value sent to the second device from the first device;
send directly, from the first device outside the trusted environment, a verification to the second device, wherein the verification to the challenge is determined by using the private secret value;
directly receive, at the first device outside the trusted environment, a confirmation from the third device that the verification was successfully verified by the second device and the third device; and
wherein the transceiver logic is further implemented to send a secure communication to the third device via the second device after receiving the confirmation.
11. The device of claim 10 , wherein the public test value is determined using a modulus value, the modulus value including a product of two distinct prime numbers.
12. The device of claim 10 , wherein to send the verification to the second device, the transceiver logic is to send a second public test value to the second device.
13. The device of claim 12 , wherein to receive the confirmation from the third device, the transceiver logic is to receive a second challenge from the third device.
14. The device of claim 13 , wherein the transceiver logic is to send a second verification to the second device, the second verification determined using a second private secret value in response to receiving the second challenge.
15. The device of claim 10 , wherein to receive the confirmation from the third device, the transceiver logic is to receive the confirmation from the third device that the verification was successfully verified by a fourth device, and wherein the third device is in communication with the second device via the fourth device.
16. A method to create a chain of trust, the method comprising:
using a processor coupled to memory to perform operations comprising:
sending, from a first device in a trusted environment with a second device and a third device, a public test value, determined using a private secret value, directly to the second device;
directly receiving, at the first device outside the trusted environment, a challenge from the third device, the third device in communication with the second device, the third device having received a test value from the second device, and the challenge generated in response to receiving the test value, the test value generated by the second device by modifying the public test value sent to the second device from the first device;
determining a verification to the challenge using the private secret value;
sending directly, from the first device outside the trusted environment, the verification to the second device;
directly receiving, at the first device outside the trusted environment, a confirmation from the third device that the verification was successfully verified by the second device and the third device; and
sending a secure communication to the third device via the second device after receiving the confirmation.
17. The method of claim 16 , wherein the public test value and the verification are determined using a modulus value, the modulus value including a product of two distinct prime numbers.