Secure Digital Signature Apparatus and Methods

摘要

The invention is a secure digital signature device which generates digital signature key pairs using a hardware random number generator. It transmits public keys to one or more smart devices and signs bit strings at the request of smart devices without exposing private keys. Requests for signatures from smart devices are not fulfilled unless the user takes action on the apparatus of the present invention: pushing a button, swiping a fingerprint, scanning their eye. The requirement for user action precludes malware issuing unintended signatures through the smart device. The private keys are maintained solely on the apparatus of the invention and are therefore not vulnerable to attack by malware on the smart device or a host server.

主权项

1. A secure digital signature device comprising:
a. a hardware random number generator; b. a computing element which creates public and private keys utilizing the output of the hardware random number generator; c. a non-volatile memory for storage of public and private keys; d. a computing element which creates a digital signature for a bit string using one or more of the private keys, e. a communication element for receiving bit strings from a smart device, f. a communication element for transmitting digital signatures to a smart device, and g. an authorization element having an authorized and unauthorized state wherein the digital signature of a bit string sent to the secure digital signature device is computed and sent to the smart device if and only if the authorization element is in an authorized state.