Method of data transfer, a method of controlling use of data and cryptographic device

A hardware security module device, comprising:

• a processor, configured to perform cryptographic operations, the processor being further configured to:
• generate a first cryptographic key pair and a first cryptographic certificate, the first cryptographic key pair comprising a first public key and a first private key and the first cryptographic certificate comprising information from which the origin of the first public key can be validated;
• a transceiver, configured to:
• send the first public key and the first cryptographic certificate to a further hardware security module device;
• receive a second public key and a second cryptographic certificate from the further hardware security module device;
• and
• receive a first cryptographic key and a corresponding access control list, and information from which the origin of the first cryptographic key can be validated, from the further hardware security module device, wherein the access control list specifies that a valid use credential must be presented in order to grant a first type of use of the first cryptographic key, wherein the first cryptographic key and corresponding access control list are received via a secure channel between the hardware security module device and the further hardware security module device, wherein the secure channel is derived from the first private key;
• the processor further configured to:
• validate the origin of the encrypted first cryptographic key.

A method comprising:

• receiving a first public key and a first cryptographic certificate from a second hardware security module device, the first cryptographic certificate comprising information from which the origin of the first public key can be validated;
• generating a second cryptographic key pair and a second cryptographic certificate in a first hardware security module device, the second cryptographic key pair comprising a second public key and a second private key and the second cryptographic certificate comprising information from which the origin of the second public key can be identified;
• sending the second public key and the second cryptographic certificate to the second hardware security module device;
• validating the first cryptographic certificate in the first hardware security module device;
• if the first cryptographic certificate is valid, encrypting a first cryptographic key and a corresponding access control list in the first hardware security module device to provide a secure channel between the first hardware security module device and the second hardware security module device, wherein the secure channel is derived from the first public key, wherein the access control list specifies that a valid use credential must be presented in order to grant a first type of use of the cryptographic key;
• sending the encrypted first cryptographic key and corresponding access control list, and information from which the origin of the encrypted first cryptographic key can be validated, to the second hardware security module device.

A method comprising:

• generating a first cryptographic key pair and a first cryptographic certificate in a second hardware security module device, the first cryptographic key pair comprising a first public key and a first private key, and the first cryptographic certificate comprising information from which the origin of the first public key can be validated;
• sending the first public key and the first cryptographic certificate to a first hardware security module device;
• receiving a second public key and a second cryptographic certificate at the second hardware security module device, the second cryptographic certificate comprising information from which the origin of the second public key can be identified;
• receiving a first cryptographic key and a corresponding access control list, and information from which the origin of the encrypted first cryptographic key can be validated, from the first hardware security module device, wherein the access control list specifies that a valid use credential must be presented in order to grant a first type of use of the first cryptographic key, wherein the first cryptographic key and corresponding access control list are received via a secure channel between the first hardware security module device and the second hardware security module device, wherein the secure channel is derived from the first private key;
• and
• validating the origin of the encrypted first cryptographic key based on the at the second hardware security module device.