US 2015/0086009 A1 · HANDLING KEY ROTATION PROBLEMS

Abstract

Example embodiments include centralized systems for managing cryptographic keys and trust relationships among systems. Embodiments may include a centralized key store and a centralized policy store. Key sets comprising public/private keys may be stored in or identified by key objects. Key objects within the key store may be organized into trust sets and policies may apply at any level within the key store. Policies may identify when to rotate key sets. When rotating key sets, a new public key and a new private key may be generated. The new public/private keys may be installed at locations where the old public/private keys reside. As the new public/private keys are installed, they may be tested. If problems with the new public/private keys occur, the new public/private keys may be rolled back to the old public/private keys for locations experiencing problems. Remedial action may then be taken to resolve the problems.

Claims20

Dependent claims

A method comprising:

generating a new key pair having a new public key and a new private key;
installing the new public key at all locations where an old public key resides;
installing the new private key at all locations where an old private key resides;
testing the new key pair to identify whether the keys function properly;
and
upon detecting the keys are not functioning properly, performing key rollback by reinstalling the old private key.

3 more elements

Dependencies are inferred from the claim text.

Handling key rotation problems

Life of this patent

Handling key rotation problems

Life of this patent

Abstract

Claims20