Secure mapping and aliasing of private keys used in public key cryptography

A method for digitally signing a message with a private key of an entity, the method comprising:

• receiving a request to digitally sign a message with a private key of an entity, wherein the private key has been assigned to the entity without revealing the private key, the private key and the public key form a key pair for use in public-key cryptography, the key pair is stored in a cryptographic signing unit (CSU), and an identifier is assigned to the key pair;
• receiving the identifier;
• and
• digitally signing the message with the private key identified by the identifier.

A system for providing digital certificate services, including digitally signing a message with a private key of an entity, the system comprising:

• a certificate services engine for:
• receiving a request to digitally sign a message with a private key of an entity, wherein the private key has been assigned to the entity without revealing the private key, the private key and a corresponding public key form a key pair for use in public-key cryptography, the key pair is stored in a cryptographic signing unit (CSU), and an identifier is assigned to the key pair,
• receiving the identifier, and
• digitally signing the message with the private key identified by the identifier;
• and
• a CSU interface, coupled to the certificate services engine, for maintaining a message that the identifier is associated with the entity.