Encryption system and method

A method comprising:

• receiving, from a first device that is unknown to a key management tool, one or more unsecure communications, wherein:
• the one or more unsecure communications comprise one or more of:
• attributes of the first device, the attributes comprising one or more of specifications or capabilities of the first device;
• or
• one or more credentials comprising identifying information of the first device;
• a device is unknown to the key management tool when the device has not previously communicated with the key management tool and a device is known to the key management tool when the device has previously communicated with the key management tool;
• determining, based on the attributes of the first device, that the first device is compatible with the key management tool, wherein the first device is compatible with the key management tool if it can send and receive secure communications to the key management tool;
• communicating a first temporary key of a plurality of stored temporary keys to the first device;
• after the first temporary key is communicated to the first device, performing a first set of one or more checks on the first device, the one or more checks being performed to determine whether the first device is a threat;
• if the first device passes the first set of one or more checks, communicating a first permanent key from the plurality of stored permanent keys to the first device, the first permanent key having an expiration date;
• and
• receiving, from the first device a request for a new permanent key from the plurality of stored keys at a time subsequent to the communication of the first permanent key.

A system comprising:

• a memory configured to store a plurality of temporary keys and a plurality of permanent keys;
• an interface configured to:
• receive, from a first device that is unknown to the system, one or more unsecure communications, wherein:
• the one or more unsecure communications comprise one or more of:
• attributes of the first device, the attributes comprising one or more of specifications or capabilities of the first device;
• or
• one or more credentials comprising identifying information of the first device;
• a device is unknown to the system when the device has not previously communicated with the system and a device is known to the system when the device has previously communicated with the system;
• one or more processors configured to:
• determine, based on the attributes of the first device, that the first device is compatible with the system, wherein the first device is compatible with the system if it can send and receive secure communications using the system;
• communicate a first temporary key of the plurality of stored temporary keys to the first device;
• after the first temporary key is communicated to the first device, perform a first set of one or more checks on the first device, the one or more checks being performed to determine whether the first device is a threat to the system;
• if the first device passes the first set of one or more checks, communicate a first permanent key from the plurality of stored permanent keys to the first device, the first permanent key having an expiration date;
• and
• wherein the interface is further configured to receive, from the first device a request for a new permanent key from the plurality of stored keys at a time subsequent to the communication of the first permanent key.