System and method for storage and retrieval of cryptographic keys

• US 20040120525A1
• Filed: 12/20/2002
• Published: 06/24/2004
• Est. Priority Date: 12/20/2002
• Status: Abandoned Application

• Current Assignee: Kasten Chase Applied Research Limited
• Original Assignee: Kasten Chase Applied Research Limited
• Inventors: Brown, David, Aitken, Steven, Bain, Trevor, Luong, Cuong Thuy, Nadarajah, Kathirkamanathan (Nathan), Miskimmin, Robert
• Application Number:
  US10/323,659
• Publication Number:
  US 20040120525A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

A system and method for managing cryptographic keys on a recipient system. A key ring file is opened on the recipient system and at least a recipient private key of a cryptographic key pair associated with a particular entity is received. The recipient private key is saved in the key ring file such that the key is identifiably associated with the entity.

Claims

1. A method for managing cryptographic keys on a recipient system, comprising:

opening a key ring file on the recipient system;

receiving at least a recipient private key of a cryptographic key pair associated with a particular entity; and

saving said recipient private key in said key ring file, so as to be identifiably associated with said particular entity.

2. The method for managing cryptographic keys according to claim 1, further comprising creating said key ring file on said recipient system prior to opening said key ring file.

3. The method for managing cryptographic keys according to claim 1, wherein said step of saving said recipient private key comprises opening an enterprise sub-file in said key ring file and saving said recipient private key in said enterprise sub-file.

4. The method for managing cryptographic keys according to claim 3, further comprising creating said enterprise sub-file in said key ring file prior to opening said enterprise sub-file.

5. The method for managing cryptographic keys according to claim 1, wherein said saving said recipient private key comprises saving said recipient private key so as to be identifiably associated with a particular recipient in addition to being identifiably associated with said particular entity.

6. The method for managing cryptographic keys according to claim 1, further comprising receiving a public key of said cryptographic key pair associated with said particular entity and saving said public key in said key ring file so as to be identifiably associated with said particular entity.

7. The method for managing cryptographic keys according to claim 1, further comprising receiving an enterprise public key associated with said particular entity and saving said enterprise public key in said key ring file so as to be identifiably associated with said particular entity.

8. The method for managing cryptographic keys according to claim 6, wherein said public key is received in a public-key certificate.

9. The method for managing cryptographic keys according to claim 7, wherein said enterprise public key is received in a public-key certificate.

10. The method for managing cryptographic keys according to claim 1, further comprising cryptographically wrapping said recipient private key prior to saving said recipient private key.

11. The method for managing cryptographic keys according to claim 1, further comprising:

serializing said key ring file; and

saving said key ring file.

12. The method for managing cryptographic keys according to claim 1, further comprising:

opening said key ring file;

identifying said recipient private key associated with said particular entity;

retrieving said recipient private key; and

providing said recipient private key to an application for decrypting information received from said particular entity.

13. A system for managing cryptographic keys on a recipient system, comprising a key ring manager operable to open a key ring file on the recipient system, receive at least a recipient private key associated with a particular entity, and save at least said recipient private key in said key ring file such that said recipient private key is identifiably associated with said particular entity.

14. The system for managing cryptographic keys according to claim 13, wherein said key ring manager is further operable to create said key ring file on said recipient system.

15. The system for managing cryptographic keys according to claim 13, wherein said key ring manager is further operable to open an enterprise sub-file in said key ring file and save said recipient private key in said enterprise sub-file.