METHOD AND SYSTEM FOR ISSUING A KILL SEQUENCE FOR A TOKEN

• US 20080056496A1
• Filed: 08/31/2006
• Published: 03/06/2008
• Est. Priority Date: 08/31/2006
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Parkinson, Steven W., Kwan, Nang Kon
• Granted Patent: US 8,356,342 B2
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

An embodiment relates generally to a method of managing a token. The method includes marking a token to be killed and detecting a presence of the token. The method also includes disabling the token in response to the marking of the token.

Claims

1. A method of managing a token, the method comprising:

marking a token to be killed;

detecting a presence of the token; and

disabling the token in response to the marking of the token.

2. The method of claim 1, wherein the disabling the token further comprising overwriting zeros on at least one private key.

3. The method of claim 1 wherein the disabling the token further comprising:

erasing at least one private key; and

overwriting zeros on a location of the at least one private key.

4. The method of claim 1, wherein the detecting of the presence of the token further comprises detecting a requested operation from the token.

5. The method of claim 4, further comprising issuing a kill order in response to the detection of the requested operation from the token.

6. The method of claim 5, wherein the kill order complies with Open Platform Application Program Data Units.

7. The method of claim 5, wherein the requested operation is one of an enrollment, an application, and a personal identification number reset requests.

8. An apparatus comprising means to implement the method of claim 1.

9. A computer-readable medium comprising computer-executable instructions for performing the method of claim 1.

10. A system for managing token, the system comprising:

a server configured to execute a token management system;

at least one client configured to couple with the server, wherein the at least one client is configured to execute a security client, and

a token device adapted to receive a token and configured to interface with the security client, wherein the token management system disables an inserted token into the token device in response to the security client determining the token being marked.

11. The system of claim 12, wherein the security client is configured to deleting at least one private key stored on the token and overwrite zeros on a storage location of the at least one private key.

12. The system of claim 10, wherein security client detects the presence of the token based on a requested operation from the token.

13. The system of claim 12, wherein the token management system issues a kill order in response to the detection of the requested operation from the token.

14. The system of claim 13, wherein the kill order complies with Open Platform Application Program Data Units.

15. The system of claim 12, wherein the requested operation is one of an enrollment, an application, and a personal identification number reset requests.