Establishing relative identity
There are disclosed a method, computing device, and storage medium for establishing relative identity between a first agent on a first computing device and a second agent on a second computing device. An absolute key and a partial relative key may be generated for the first agent, wherein the absolute key and the partial relative key define a relative identity of the first agent, wherein the relative identity is unique for a relationship between the first agent and the second agent.
1. A method for establishing relative identity relationship between a first agent and second agent, the method comprising:
a first computing device generating a first absolute key for the first agent;
generating a first partial relative key for the first agent;
wherein the first absolute key and the first partial relative key define a relative identity of the first agent, wherein the relative identity is unique for a relationship between the first agent and the second agent;
generating an intermediate key by taking a mathematical function, hash, or algorithm of the first absolute key, the first partial relative key, and a second partial relative key for the second agent;
generating an encryption key by using a mathematical function, hash, or algorithm of the intermediate key and a second absolute key for the second agent;
wherein the relative identity relationship is characterized by the encryption key, and the encryption key is used to encrypt subsequent communications between the first agent and second agent.
2. The method for establishing relative identity of claim 1 wherein the first absolute key for the first agent is generated within the first agent.
3. The method for establishing relative identity of claim 1 wherein the first absolute key is not transmitted over a network.
4. The method for establishing relative identity of claim 1 wherein the first absolute key is not known to the second agent.
5. The method for establishing relative identity of claim 1 wherein the first partial relative key is transmitted over a network to the second agent.
6. A computing device for establishing relative identity relationship between a first agent and a second agent, the computing device comprising:
a processor
a memory coupled with the processor
a storage medium having instructions stored thereon which when executed cause the computing device to perform actions comprising
generating a first absolute key for the first agent;
generating a first partial relative key for the first agent;
wherein the first absolute key and the first partial relative key define a relative identity of the first agent, wherein the relative identity is unique for a relationship between the first agent and the second agent;
generating an intermediate key by taking a mathematical function, hash, or algorithm of the first absolute key, the first partial relative key, and a second partial relative key for the second agent;
generating an encryption key by using a mathematical function, hash, or algorithm of the intermediate key and a second absolute key for the second agent;
wherein the relative identity relationship is characterized by the encryption key, and the encryption key is used to encrypt subsequent communications between the first agent and second agent.
7. The computing device for establishing relative identity of claim 6 wherein the first absolute key is generated within the first agent.
8. The computing device for establishing relative identity of claim 6 wherein the first absolute key is not transmitted over a network.
9. The computing device for establishing relative identity of claim 6 wherein the first absolute key is not known to the second agent.
10. The computing device for establishing relative identity of claim 6 wherein the first partial relative key is transmitted over a network to the second agent.
11. A non-transitory storage medium having instructions stored thereon including a software agent which when executed by a computing device will cause the computing device to perform actions comprising:
generating a first absolute key for the software agent;
generating a first partial relative key for the software agent;
wherein the first absolute key and the first partial relative key define a relative identity of the software agent, wherein the relative identity is unique for a relationship between the software agent and a remote agent;
generating an intermediate key by taking a mathematical function, hash, or algorithm of the first absolute key, the first partial relative key, and a second partial relative key for the remote agent;
generating an encryption key by using a mathematical function, hash, or algorithm of the intermediate key and a second absolute key for the remote agent;
wherein the relative identity relationship is characterized by the encryption key, and the encryption key is used to encrypt subsequent communications between the software agent and remote agent.
12. The storage medium of claim 11 wherein the first absolute key is generated within the software agent.
13. The storage medium of claim 11 wherein the first absolute key is not transmitted over a network.
14. The storage medium of claim 11 wherein the first absolute key is not known to the remote agent.
15. The storage medium of claim 11 wherein the first partial relative key for the software agent is transmitted over a network to the remote agent.