Internationally regulated system for one to one cryptographic communications with national sovereignty without key escrow

A system for controlling tapping of a suspect encrypted communication, the system comprising:

• a multiplicity of security modules each encrypting information using a different session key and each transmitting, in addition to said information, his own secret key, encrypted using at least one agency key wherein information transmitted in the course of a session between a security module A from among said multiplicity of security modules, and another security module B, can only be decrypted by a tapping security module if the at least one agency key retrieves A's secret key for the tapping security module;
• an agency security module which does not store the secret keys and which stores the agency key so as to prevent access thereto by any of the multiplicity of security modules;
• and
• an agency access monitoring module monitoring use of the agency key so as to prevent use of the agency key to facilitate unlawful tapping.

A key recovering method comprising:

• providing a public key of at least one key recovering subscriber entity to each of a plurality of subscriber entities;
• for at least one of the plurality of subscriber entities,
• generating a key backup unit on which is stored said subscriber entity's secret key encrypted using said public key of said key recovering subscriber entity;
• and
• upon loss of the secret key, presenting said key backup unit to the key recovering subscriber entity for recovery of the subscriber entity's secret key.