Method and apparatus for cryptographic key rollover during operation

• US 20020071563A1
• Filed: 12/12/2000
• Published: 06/13/2002
• Est. Priority Date: 12/12/2000
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Kurn, David Michael, Panero, Robert A., Salmond, Kent Adams
• Application Number:
  US09/736,717
• Publication Number:
  US 20020071563A1
• Time in Patent Office: Days
• US Class Current: 380/280
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

In scalable multi-node multi-process application environments, identical copies of applications are often executing in parallel thus allowing the distribution of load and tolerance of system failure. A problem arises when these applications are security-oriented and involve keying information that changes periodically, such as in the case of public key certificate renewal. When these certificates need renewal, each instance of such applications could attempt to contact the certification authority, potentially causing a conflict since each instance is unaware of the renewal efforts by others. The present invention implements a central process called the Key Repository process, assigning it the function of performing these renewals and other certificate management functions, and inhibiting the application programs from performing these actions. When new certificates are issued, the Key Repository Process makes them available to affected applications when they next request them. Alternately, a signal is sent to each application instance to alert it to the presence of new certificates, allowing these applications to request them as appropriate.

Claims

1. A method for rollover of cryptographic keys during operation of a computer system, the method comprising the steps of:

(a) providing an old set of cryptographic keys;

(b) checking with a key repository to determine if a certificate re-issuance is necessary, meanwhile maintaining the availability of the old set of cryptographic keys;

(c) performing a rollover operation;

(d) if the rollover operation in step (c) results in new or revised keys, storing the new or revised keys in a database; and

(e) if the rollover operation in step (c) results in the new or revised keys, providing the new or revised keys to applications that need them when next requested by such applications.

2. The method of claim 1, wherein during step (b) the key repository utilizes one or more services of a specialized application acting as an extension of the key repository.

3. The method of claim 2 further comprising the step of:

(f) if the key repository utilizes the one or more services of the specialized application, authenticating authorization of the specialized application to perform those service.

4. The method of claim 1 being invoked as a result of a command.

5. The method of claim 1 being invoked as a result of a periodic check which senses that the old set of cryptographic keys are approaching expiration.

6. The method of claim 1 being invoked as a result of sensing an expired key.

7. The method as in claim 1, wherein the applications are notified of the presence of new keys by the Key Repository process.

8. The method as in claim 1, wherein the applications detect a missing key, and check with the Key Repository for that key and, if the missing key has been reissued, the applications receive a newly-issued key.

9. The method as in claim 1, wherein the Key Repository process is prompted by the applications to invoke the method as a result of the applications detecting a key approaching expiration.

10. The method as in claim 1, wherein the applications request the Key Repository process to provide thereto a new or revised key as a result of the applications detecting an expired key.