Management of secret data items used for server authentication

A method comprising:

• providing a zone trusted information device that includes a universal serial bus (USB) connector, a processor, a data storage device and zone trusted information software;
• connecting, in data communication, a computer device to a data communication network;
• connecting, in data communication, the computer device to the zone trusted information device through the USB connector of the zone trusted information device;
• establishing, over the data communication network between a remote server and the zone trusted information software running on the processor of the zone trusted information device, a direct secure sockets layer (SSL) data communication connection;
• receiving, through the direct SSL data communication connection, from the remote server and by the zone trusted information software running on the processor of the zone trusted information device, a backup of server keys to a set of application(s) running on an untrusted platform;
• and
• storing the backup of server keys to the set of application(s) running on the untrusted platform in the data storage device of the zone trusted information device.

A security device comprising:

• a zone trusted information device that includes a universal serial bus (USB) connector, a processor, a data storage device and zone trusted information software;
• a computer device in data communication with the zone trusted information device through the USB connector, the computer device also in data communication with a data communication network;
• and,
• zone trusted information software running on the processor of the zone trusted information device and performing:
• establishing, over the data communication network between a remote server and the zone trusted information software, a direct secure sockets layer (SSL) data communication connection;
• receiving, through the direct SSL data communication connection, from the remote server and by the zone trusted information software running on the processor of the zone trusted information device, a backup of server keys to a set of application(s) running on an untrusted platform;
• and
• storing the backup of server keys to the set of application(s) running on the untrusted platform in the data storage device of the zone trusted information device.

A computer program stored in a non-transitory computer readable storage medium, the computer program comprising program code for causing a processor of a security device to perform a method comprising:

• providing a zone trusted information device that includes a universal serial bus (USB) connector, a processor, a data storage device and zone trusted information software;
• connecting, in data communication, a computer device to a data communication network;
• connecting, in data communication, the computer device to the zone trusted information device through the USB connector of the zone trusted information device;
• establishing, over the data communication network between a remote server and the zone trusted information software running on the processor of the zone trusted information device, a direct secure sockets layer (SSL) data communication connection;
• receiving, through the direct SSL data communication connection, from the remote server and by the zone trusted information software running on the processor of the zone trusted information device, a backup of server keys to a set of application(s) running on an untrusted platform;
• and
• storing the backup of server keys to the set of application(s) running on the untrusted platform in the data storage device of the zone trusted information device.