BACKGROUND

“Cyber assets” refer to devices, systems, data, code, etc., whether tangible or intangible, for which the ability to control access configurations of the asset represents a type of “cyber ownership.” Example cyber assets may include without limitation vehicles, computing devices, biological systems, real property, buildings, equipment, databases, data objects, etc. having cryptographically-controlled access configurations (e.g., controlled by a security system, a lock, and/or an access control list). Access configurations represent systems and/or electronic data records that control access to a cyber asset.

SUMMARY

Implementations described and claimed herein address the foregoing problems by providing a system to manage access to a cyber asset using a separate physical key device. Access to the cyber asset is controlled by an access configuration controller configured to access a memory storing a public cryptographic key as an unalterable record. The public cryptographic key is cryptographically paired with a private cryptographic key securely recorded in the separate physical key device. The access configuration controller receives an access control change instruction signed by the private cryptographic key of the separate physical key device and verifies a valid signing of the access control change instruction by the private cryptographic key using the public cryptographic key read from the memory. Access to the asset is managed according to one or more access authorization records recorded in a storage system secured by the access configuration controller. The access configuration controller alters the access authorization records according to the access control change instruction, responsive to verification of the valid signing of the access control change instruction by the private cryptographic key using the public cryptographic key.

Other implementations are also described and recited herein.

