초록 ▼

A method and system for creating and administering certificates digitally signed by a trusted entity (certificate authority) to ensure that certificated transactions are authenticated as that of a particular entity. Requests for a certificate, along with verification information, are directed to the

A method and system for creating and administering certificates digitally signed by a trusted entity (certificate authority) to ensure that certificated transactions are authenticated as that of a particular entity. Requests for a certificate, along with verification information, are directed to the certificate authority, where they are held and accessed by an entity having verification responsibilities (registration authority) and approved or disapproved.

대표청구항 ▼

[ What is claimed is:] [6.] Apparatus for issuing a plurality of types of certificates for a transaction comprising:an interface to a network;a storage device;a plurality of cryptographic processors each associated with a type of certificate;an application processor adapted for accepting from said n

[ What is claimed is:] [6.] Apparatus for issuing a plurality of types of certificates for a transaction comprising:an interface to a network;a storage device;a plurality of cryptographic processors each associated with a type of certificate;an application processor adapted for accepting from said network interface a request for issuance of a type of certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request associated with said type of certificate for access to said certificate issuance request written on said storage device, for reading said certificate issuance request form said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the cryptographic processor associated with said type of certificate to generate a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate;each processor being a redundant pair of processors;said storage device comprising portions to which data is written redundantly and independently;a standalone processor, electrically isolated from said network interface and said application processor, for generating higher-level certificates for said plurality of types of certificates;said plurality of cryptographic processors comprising a first cryptographic card reader communicating with said application processor for generation of said requested certificate using a corresponding plurality of secure cryptographic cards; anda second cryptographic card reader communicating with said standalone processor for generating said higher-level certificates using said corresponding plurality of secure cryptographic cards.