STORAGE AND DISTRIBUTION OF SECURE OR CRYPTOGRAPHIC MATERIAL

摘要

A user having remote device wants to access an application that requires that the user possess a user application cryptographic credential. If the application needs to verify the identity of the user, the user's remote device performs a cryptographic operation using the user application cryptographic credentials, and sends the result to the application. A configuration for securely distributing the user application cryptographic credentials includes at least one gateway located at an enterprise that is under the control of an enterprise administrator, and a controller that is not located at the enterprise but can be configured by the enterprise administrator to cooperate with the at least one gateway.

主权项

1. A system for distributing a credential from an enterprise to a user of a remote device, comprising:
a controller at a first location; a gateway at a second location different than the first location; the controller having
a storage for storing an encrypted credential, anda processor for
(i) receiving a credential request from the remote device,(ii) retrieving the encrypted credential from the storage,(iii) sending the encrypted credential to the gateway,(iv) receiving a decrypted credential from the gateway,(v) sending the decrypted credential to the remote device; and the gateway having
a storage for storing a certificate, anda processor for
(a) receiving the encrypted credential from the controller,(b) decrypting the encrypted credential using the certificate to produce the decrypted credential, and(c) sending the decrypted credential to the controller.