Revocation and updating of tokens in a public key infrastructure system

A method of updating a token, comprising:

• accessing a database by user identification and token identification, wherein the database has a plurality of certificates/private keys associated with each token identification;
• determining which certificates/private keys of the plurality of certificates/private keys have not been downloaded to the token since the last update;
• encrypting all certificates/private keys of the plurality of certificates/private keys which have been not been downloaded to the token using a public key associated with the token identification in the database to form a download packet;
• downloading the download packet to the token;
• and
• activating the certificates/private keys in the download packet using the private key in the token.

A computer program for updating a token embodied on a computer readable medium and executable by a computer, comprising:

• accessing a database by user identification and token identification, wherein the database has a plurality of certificates/private keys associated with each token identification;
• determining which certificates/private keys of the plurality of certificates/private keys have not been downloaded to the token since the last update;
• encrypting all certificates/private keys of the plurality of certificates/private keys which have been not been downloaded to the token using a public key associated with the token identification in the database to form a download packet;
• downloading the download packet to the token;
• and
• activating the certificates/private keys using the private key in the token.