Information of a device that generates digital signatures is reliably
identified by (a) for each of a plurality of devices manufactured in an environment,
(i) creating a public-private key pair within the environment, (ii) linking within
the environment in a secure manner the public key with other information associated
with the device, and (iii) before release of the device from the environment, storing
the private key within the device for generating a digital signature for an electronic
message, and (b) thereafter, when a said linked public key successfully authenticates
a digitally signed message, identifying the other information associated with said
linked public key as pertaining to the device to which belongs the private key
utilized in digitally signing the message. Manufacturing the devices includes creating
a public-private key pair within the secure environment, and storing the private
key within the device against the possibility of divulgement thereof by the device.
