Secure communications to multiple devices and multiple parties using physical and virtual key storage

A system for establishing secure communications comprising:

• at least one data processor;
• and
• memory storing instructions which, when executed by the at least one data processor, result in operations comprising:
• receiving, from a client computing device, a request to instantiate a virtual key store (VKS) node;
• causing the VKS node to be instantiated;
• generating, in response to the request, a cryptographically calculated uniform resource locator (URL);
• receiving, from a certification authority server, a cryptographic identity certificate;
• instantiating a virtual desktop infrastructure (VDI) instance and configuring the VDI instance with the cryptographic identity certificate;
• and
• establishing, using the generated cryptographically calculated URL, communications between the client computing device and an application running on the VDI instance such that the VKS node acts as a cryptographic proxy on behalf of the application running on the VDI instance with at least one remote computing device such that information being sent by the application is encrypted at the VKS node and that encrypted information being sent by the at least one remote computing device is decrypted at the VKS node.

A non-transitory computer program product for establishing secure communications storing instructions, which when executed by at least one computing device, result in operations comprising:

• receiving, from a client computing device, a request to instantiate a virtual key store (VKS) node;
• causing the VKS node to be instantiated;
• generating, in response to the request, a cryptographically calculated uniform resource locator (URL);
• receiving, from a certification authority server, a cryptographic identity certificate;
• instantiating a virtual desktop infrastructure (VDI) instance and configuring the VDI instance with the cryptographic identity certificate;
• and
• establishing, using the generated cryptographically calculated URL, communications between the client computing device and an application running on the VDI instance such that the VKS node acts as a cryptographic proxy on behalf of the application running on the VDI instance with at least one remote computing device such that information being sent by the application is encrypted at the VKS node and that encrypted information being sent by the at least one remote computing device is decrypted at the VKS node.