Patent ID: 7047414

Claim:
A method of managing a database for reliably identifying a Security Profile of a device that generates digital signatures, comprising the steps of, (a) maintaining the database in a secure environment, the secure environment existing outside of the device and having a security rating, (b) recording in the database for each one of a plurality of devices manufactured in a secure manufacturing environment, (i) a public key of a public-private key pair of the manufactured device, the private key being stored within the device, and (ii) a Security Profile of the manufactured device in association with the public key, wherein the Security Profile includes security features and manufacturing history of the manufactured device and wherein the Security Profile defines a security level of the manufactured device relative to other manufactured devices, the public key and Security Profile thereby being securely linked together and wherein the security rating of the secure environment is at least comparable to the security level of the manufactured device, and (c) thereafter, when a public key linked in said step (b) successfully authenticates a digitally signed message, identifying the Security Profile associated with said linked public key as pertaining to the manufactured device to which belongs the private key utilized in digitally signing the message.