# US 2019/0173679 A1 · Non-networked device performing certificate authority functions in support of remote aaa > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0173679 A1 - Document ID: US20190173679A1 - Status: Published application - Kind: A1 - Application number: 15/829,257 - Filed: 2017-12-01 - Published: 2019-06-06 - Earliest claimed: 2017-12-01 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Shawn D. Hennessy; Nevenko Zunic; Todd P. Seager - Web page: https://patentgrep.com/patent/US20190173679A1 ## CPC - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - G06F 13/385: {for adaptation of a particular data processing system to different peripheral devices} - G06F 13/4282: {on a serial bus, e.g. I2C bus, SPI bus (on daisy chain buses G06F13/4247)} - G06F 21/33: using certificates - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - H04L 9/006: {involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 9/3247: {involving digital signatures} - H04L 9/38: Encryption being effected by mechanical apparatus, e.g. rotating cams, switches, keytape punchers - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols} - H04L 63/101: {Access control lists [ACL]} - G06F 2213/0042: Universal serial bus [USB] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract In an approach, a certificate authority management device comprises a computing device with an operating system that supports certificate authority software, a power port with shutter door, a first key slot for an administrative user to enable use of the certificate authority management device in response to an insertion of a first key, a second key slot for management of a plurality of hybrid security keys in response to an insertion of a second key, and a touchscreen with graphical user interface. ## Claims ### Claim 1 A certificate authority management device comprising: a computing device with an operating system that supports certificate authority software; a power port with shutter door; a first key slot for an administrative user to enable use of the certificate authority management device in response to an insertion of a first key; a second key slot for management of a plurality of hybrid security keys in response to an insertion of a second key; and a touchscreen with graphical user interface. ### Claim 2 (depends on 1) The certificate authority management device of claim 1, further comprising a USB port with a shutter door. ### Claim 3 (depends on 1) The certificate authority management device of claim 1, further comprising a biometric input scanner. ### Claim 4 (depends on 3) The certificate authority management device of claim 3, wherein the biometric input scanner is selected from the group consisting of: a retinal scanner, fingerprint scanner, and facial scanner. ### Claim 5 (depends on 1) The certificate authority management device of claim 1, wherein a repository of the computing device contains an access control list of authorized users and associated authorizations of each authorized user. ### Claim 6 (depends on 1) The certificate authority management device of claim 1, wherein the first key slot comprises a first locking device with a first lock cylinder that matches with a hybrid security key. ### Claim 7 (depends on 1) The certificate authority management device of claim 1, wherein the second key slot comprises a second locking device with a second lock cylinder that allows use with a rectangular-shaped hybrid security key with one physical face and one logical face. ### Claim 8 (depends on 1) The certificate authority management device of claim 1, wherein the second key slot can be swapped for a third key slot comprising a third locking device with a third lock cylinder that allows use with a triangular-shaped hybrid security key with at least one physical face and at least one logical face. ### Claim 9 (depends on 1) The certificate authority management device of claim 1, wherein the second key slot can be swapped for a fourth key slot comprising a fourth locking device with a fourth lock cylinder that allows use with a square-shaped hybrid security key with two physical faces and two logical faces.