System and method for securely updating a registered device using a development system and a release management system operated by an update provider and an update publisher

• US 10,162,968 B1
• Filed: 02/19/2018
• Issued: 12/25/2018
• Est. Priority Date: 11/30/2017
• Status: Active Grant

• Current Assignee: DigiCert Incorporated
• Original Assignee: Mocana Corporation (DigiCert Incorporated)
• Inventors: Kumar, Srinivas, Gupta, Atul, Ulanov, Ruslan, Uchil, Shreya
• Primary Examiner(s): Pan, Hang
• Application Number:
  US15/898,950
• Time in Patent Office: 309 Days
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

A method of updating a registered device using a development system and a release management system. The method includes: building an update package; signing the update package using a provider signing key, wherein a first digital signature is included in the update package; encrypting the signed update package using a publisher public key; requesting, by an update client on the device, an update package; preparing, by the update service, a set of signed update packages for the device; reencrypting and resigning, by the update service, the signed update package by decrypting the initial encryption using a publisher private key of the update publisher, signing the update package using a signing key of the update publisher, and finally encrypting the update package using a device public key from the device certificate, for final encryption of the update package; and decrypting the encrypted update package using a device private key.

Claims

1. A method of updating a registered device using a development system and a release management system operated by an update provider, an update service operated by an update publisher, an update client on the device, and a local secure element on the device, the method comprising:

building, on the development system, an update package including at least one of a firmware update, a software update, a configuration update, and an update script;

signing, by the release management system, the update package using a provider signing key, wherein a first digital signature is included in the update package;

encrypting, by the release management system, the signed update package using a publisher public key from a publisher certificate for the update publisher for initial encryption of the update package;

sending, by the release management system, the signed and encrypted update package to the update service;

requesting, by the update client on the device, an update package, wherein the request includes a device manifest and at least the vendor identifier, the model number, and a device certificate for the device;

preparing, by the update service, based on the device manifest, a set of signed update packages for the device configured based on orchestration rules for the device;

reencrypting and resigning, by the update service, the signed update package by decrypting the initial encryption using a publisher private key of the update publisher, signing the update package using a signing key of the update publisher, and finally encrypting the update package using a device public key from the device certificate, for final encryption of the update package;

sending, by the update service, the encrypted and doubly signed update package to the update client on the device;

decrypting, by the update client, the encrypted update package using a device private key for the device,

verifying, by the update client, the first and second digital signatures using the respective public keys from the update provider and publisher certificates issued by a certificate authority; and

wherein the update script is executed on the device to apply the update package to the device.

2. The method of claim 1, wherein the initial encryption of the update package is performed using a symmetric key, and the symmetric key is further encrypted using the publisher public key;

a message digest of the update package is generated, and the first digital signature for the message digest is generated using a provider private key from the update provider; and

the first digital signature is further encrypted using the publisher public key.

3. The method of claim 1, wherein the final encryption of the update package is performed using a symmetric key, and the symmetric key is further encrypted using the device public key;

and

a message digest of the update package is generated, and the second digital signature for the message digest is generated using a publisher private key from the update provider; and

the second digital signature is further encrypted using the device public key.

4. The method of claim 1, wherein the device private-public keypair for the encryption may be generated by the secure element on the device, and the device private key is protected within the secure element, and

wherein a device certificate for the device public key is issued by a certificate authority.