Sharing keys with authorized users
Methods, systems, and devices for sharing keys with authorized users are described. In some cases, the first device may transmit, to the server, a request for a certificate for the first device to communicate with a memory device. The server may generate the certificate using a first private key of a first public-private key pair. The first device may receive the certificate and generate a content message that is signed by a second private key of a second public-private key pair. In some cases, the memory device may receive the content message and the certificate and validate the certificate using a first public key of the first public-private key pair. In such cases, the first device may establish a connection with the memory device in response to the memory device validating the certificate.
1. A method, comprising:
transmitting, by a first device and to a server, a request for a certificate for the first device to communicate with a memory device;
receiving, from the server, the certificate generated using a first private key of a first public-private key pair associated with the memory device and the server, the certificate indicating a duration of time that the certificate is valid;
generating a content message that is signed by a second private key of a second public-private key pair associated with the memory device and the first device;
transmitting, to the memory device, the content message and the certificate based at least in part on generating the content message; and
establishing, by the first device, a connection with the memory device in response to the memory device validating the certificate.
2. A method, further comprising:
generating a first public-private key pair comprising a first private key and a first public key, the first public-private key pair associated with a memory device and a first device;
transmitting, by the first device and to a server, a request for a certificate for the first device to communicate with the memory device, wherein transmitting the request for the certificate includes transmitting the first public key of the first public-private key pair, wherein the certificate includes the first public key;
receiving, from the server, the certificate generated using a second private key of a second public-private key pair associated with the memory device and the server, the certificate indicating a duration of time that the certificate is valid;
generating a content message that is signed by the first private key of the first public-private key pair;
transmitting, to the memory device, the content message and the certificate based at least in part on generating the content message; and
establishing, by the first device, a connection with the memory device in response to the memory device validating the certificate.
3. The method of claim 2 , further comprising:
generating the request for the certificate based at least in part on generating the first public-private key pair, wherein transmitting the request for the certificate is based at least in part on generating the request for the certificate, wherein the request for the certificate includes the first public key.
4. The method of claim 1 , further comprising:
transmitting, to the server, a second request for an updated certificate based at least in part on receiving a message indicating an error associated with the certificate, wherein the error indicates that the certificate is invalid, absent, corrupt, or a combination thereof;
receiving, from the server, the updated certificate generated using the first private key of the first public-private key pair; and
transmitting, to the memory device, the updated certificate based at least in part on receiving the updated certificate.
5. A method, comprising:
transmitting, by a first device and to a server, a request for a certificate for the first device to communicate with a memory device;
receiving, from the server, the certificate generated using a first private key of a first public-private key pair associated with the memory device and the server, the certificate indicating a duration of time that the certificate is valid;
determining that the certificate is signed by the first private key of the first public-private key pair;
generating a content message that is signed by a second private key of a second public-private key pair associated with the memory device and the first device, wherein generating the content message is based at least in part on determining that the certificate is signed;
transmitting, to the memory device, the content message and the certificate based at least in part on generating the content message; and
establishing, by the first device, a connection with the memory device in response to the memory device validating the certificate.
6. The method of claim 1 , wherein the content message comprises a firmware update, a software update, a boot image, a secure command, or a combination thereof.
7. The method of claim 1 , wherein the certificate indicates the duration of time for access to the memory device.
8. A method, comprising:
receiving, from a first device and by a server, a request for a certificate for the first device to communicate with a memory device;
generating the certificate using a first private key of a first public-private key pair associated with the memory device and the server; and
transmitting, by the server and to the first device, the certificate generated using the first private key of the first public-private key pair.
9. The method of claim 8 , further comprising:
determining a duration of time that the certificate is valid based at least in part on receiving the request for the certificate, wherein generating the certificate is based at least in part on determining the duration of time that the certificate is valid.
10. The method of claim 8 , further comprising:
determining a duration of time for access to the memory device based at least in part on receiving the request for the certificate, wherein generating the certificate is based at least in part on determining the duration of time for access to the memory device.
11. The method of claim 10 , wherein the certificate indicates the duration of time for access to the memory device.
12. The method of claim 8 , further comprising:
receiving, as part of the request for the certificate, a second public key of a second public-private key pair generated by the first device, wherein generating the certificate is based at least in part on determining that the request for the certificate comprises the second public key.
13. The method of claim 12 , further comprising:
encoding the second public key of the second public-private key pair in the certificate based at least in part on receiving the second public key, wherein transmitting the certificate is based at least in part on encoding the second public key in the certificate.