Back to results
US 7,688,980 B2Granted
Cryptographic-key generation and management
AssigneeFirst Data Corporation
InventorsBrian Kean, Kristi White
Life of this patent
Estimating the term…
Abstract
Methods and systems are provided of managing a cryptographic key. A first key component is received from a first key custodian. A second key component is received from a second key custodian. A key operation is performed on the first and second key components to generate the cryptographic key. A cryptographic-key number is assigned to the cryptographic key. A key form is printed specifying the cryptographic key. An association is recorded between the cryptographic-key number and an electromagnetic tag identifier coupled physically with the key form.
Claims4
A method of managing a cryptographic key, the method comprising:
- assigning, by a microprocessor-based key terminal, a cryptographic-key number to the cryptographic key;
- printing, from the microprocessor-based key terminal, a key form specifying the cryptographic key;
- recording, by the microprocessor-based key terminal on a storage device, an association between the cryptographic-key number and an electromagnetic tag identifier coupled physically with the key form;
- receiving, by the microprocessor-based key terminal, a first key component from a first key custodian;
- receiving, by the microprocessor-based key terminal, a second key component from a second key custodian;
- performing a key operation on the first and second key components to generate the cryptographic key;
- authenticating, by the microprocessor-based key terminal, the first key custodian by reading a first card presented by the first key custodian, receiving a first personal identification number input by the first key custodian, and verifying consistency of information read from the first card with the first personal identification number;
- authenticating, by the microprocessor-based key terminal, the second key custodian by reading a second card presented by the second key custodian, receiving a second personal identification number input by the second key custodian, and verifying consistency of information read from the second card with the second personal identification number;
- and
- authenticating, by the microprocessor-based key terminal, a key manager who authorized the key custodians by reading a key-manager card presented by the key manager, receiving a key-manager personal identification number input by the key manager, and verifying consistency of information read from the key-manager card with the key-manager personal identification number.
7 more elements
A method for managing a cryptographic key, the method comprising:
- authenticating, by a microprocessor-based key terminal, a key manager by reading a key-manager card presented by the key manager, receiving a key-manager personal identification number input by the key manager, and verifying consistency of information read from the key-manager card with the key-manager personal identification number;
- authenticating, by the microprocessor-based key terminal, a first key custodian authorized by the authenticated key manager by reading a first key-custodian card presented by the first key custodian, receiving a first key-custodian personal identification number input by the first key custodian, and verifying consistency of information read from the first key-custodian card with the first key-custodian personal identification number;
- receiving, by the microprocessor-based key terminal, a first key component from the authenticated first key custodian;
- authenticating, by the microprocessor-based key terminal, a second key custodian authorized by the authenticated key manager by reading a second key-custodian card presented by the second key custodian, receiving a second key-custodian personal identification number input by the second key custodian, and verifying consistency of information read from the second key-custodian card with the second key-custodian personal identification number;
- receiving, by the microprocessor-based key terminal, a second key component from the authenticated second key custodian;
- performing a key operation on the first and second key components to generate the cryptographic key;
- assigning, by the microprocessor-based key terminal, a cryptographic-key number to the cryptographic key;
- printing, from the microprocessor-based key terminal, a key form identifying the cryptographic-key number with a one-dimensional bar code, specifying the cryptographic key with a two-dimensional bar code, and identifying the first and second key custodians;
- and
- recording, by the microprocessor-based key terminal on a storage device, an association between the cryptographic-key number and an electromagnetic tag identifier coupled physically with the key form.
7 more elements
A system for generating a cryptographic key, the system comprising:
- a key terminal having an input device and a processor;
- an output device coupled with the key terminal;
- a storage device coupled with the key terminal;
- and
- a host security module coupled with the key terminal,
- wherein the processor has programming instructions to interact with the input device, the output device, the storage device, and the host security module to:
- assign a cryptographic-key number to the cryptographic key;
- print a key form specifying the cryptographic key with the output device;
- record an association between the cryptographic-key number and an electromagnetic tag identifier coupled physically with the key form on the storage device;
- receive a first key component from a first key custodian with the input device;
- receive a second key component from a second key custodian with the input device;
- and
- perform a key operation on the first and second key components with the host security module to generate the cryptographic key;
- and wherein the input device comprises a keypad and a card reader;
- and
- the processor further has programming instructions to:
- authenticate the first key custodian by reading a first card presented by the first key custodian with the card reader, receive a first personal identification number input by the first key custodian with the keypad, and verify consistency of information read from the first card with the first personal identification number;
- authenticate the second key custodian by reading a second card presented by the second key custodian with the card reader, receive a second personal identification number input by the second key custodian with the keypad, and verify consistency of information read from the second card with the second personal identification number;
- and
- authenticate a key manager who authorized the key custodians by reading a key-manager card presented by the key manager with the card reader, receive a key-manager personal identification number input by the key manager with the keypad, and verify consistency of information read from the key-manager card with the key-manager personal identification number.
17 more elements
Dependencies are inferred from the claim text.