Patent ID: 9202057
Filing Date: 2015-12-01
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for identifying private keys that have been compromised, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying, by the computing device, a private key that enables a signatory to digitally sign applications; collecting, by the computing device, information about the private key from at least one public source, the information identifying a package name of an application digitally signed with the private key; determining, by the computing device and based on the information collected from the public source, that the private key has been compromised and is accessible to unauthorized signatories, wherein determining that the private key has been compromised comprises determining that the package name of the application digitally signed with the private key differs by more than a predetermined similarity threshold from an additional package name of at least one additional application digitally signed with the private key; performing a security action in response to determining that the private key has been compromised and is accessible to the unauthorized signatories.