Method, server, and communication device for updating identity-based cryptographic private keys of compromised communication devices

Method (500), server, and communication device for updating identity-based cryptographic private keys of compromised communication devices. One method (500) includes receiving, at a server, a security status indicating that the security of a first communication device has been compromised (505). The first communication device is associated with a user and includes a first identity-based cryptographic private key and a first user identifier. The method (500) also includes, responsive to receiving the security status, determining, with the server, a second user identifier based on the first user identifier (520). The method (500) further includes determining, with the server, a second identity-based cryptographic private key based on the second user identifier (525). The method (500) also includes distributing, via the server, the second identity-based cryptographic private key to a second communication device (530). The second communication device is associated with the user.