Hardware Security Module that Enforces Signature Requirements

A method comprising:

• storing a plurality of cryptographic key/token pairs in a key storage of a hardware security module (HSM), wherein at least a first key/token pair of the plurality of cryptographic key/token pairs is assigned to a first entity and includes a first private token, and wherein a plurality of entities are associated with the first entity;
• and
• responding, from a cryptographic engine in the HSM, to a private token usage request for the first private token received from a second entity of the plurality of entities with a cryptographically-signed object signed using the first private token responsive to determining, in the cryptographic engine, that one or more approvals from one or more third entities of the plurality of entities have been received by the cryptographic engine, wherein the one or more third entities are a quorum of a subset of the plurality of entities that are permitted to approve cryptographic signing of the object.

A hardware security module (HSM) comprising:

• a key storage storing a plurality of cryptographic key/token pairs during use, wherein at least a first key/token pair of the plurality of cryptographic key pairs is assigned to a first entity and includes a first private token, and wherein a plurality of entities are associated with the first entity;
• and
• a cryptographic engine coupled to the key storage, the cryptographic engine configured to respond to a private token usage request for the first private token received from a second entity of the plurality of entities with a cryptographically-signed object signed using the first private token responsive to determining, in the cryptographic engine, that one or more approvals from one or more third entities of the plurality of entities have been received by the cryptographic engine, and wherein the first private token is augmented with a modify attribute permitting the first private token to be used to modify attributes of other private tokens.