Process for creating and managing at least one cryptographic key, and system for its implementation
AssigneeEvidian
InventorsPierre Calvez, Brigitte Courtaux, Jacques Lebastard
Life of this patent
Estimating the term…
Abstract
A process for creating and managing pairs of asymmetrical cryptographic keys and/or certificates associated with the pairs of keys, each pair of keys and associated certificates being intended for an object managed by a computer system. The process includes creating an individual request for creating and/or certifying at least one pair of keys for an object of the system that lacks a pair of keys or a certificate for its pair of keys.
Claims12
A method for creating and managing symmetrical cryptographic keys, wherein a symmetrical cryptographic key can be used to both encode and decode data, and wherein each key is intended for a user managed by a computer system comprising:
- searching in storage means for at least one user for which a symmetric key must be created, each user associated with one or more attributes comprising a status attribute and a scheduling attribute, wherein said status attribute is capable of having any one of the following values:
- pending, in progress, process ended with an error message, process done, sending a creation request and done;
- creating, based on said one or more attributes, at least one individual creation request for creating a symmetric key for said user, said creating further comprising periodically executing said individual creation request based on said scheduling attribute;
- transmitting a key generating request corresponding to said individual creation request to a key generating center;
- issuing, by said key generating center, a symmetric key in accordance with said transmitted key generating request;
- and
- creating each of said individual creation requests from a corresponding multiple creation request recorded in the storage means relative to a set of users belonging to a preset list, or to a set of users defined by predetermined criteria, as well as relative to model pairs of keys for either of said sets of users.
A computer processing system including a storage means for creating symmetrical cryptographic keys, wherein a symmetrical cryptographic key can be used to both encode and decode data, and wherein said computer processing system manages users, said computer processing system comprising:
- a key generating center for creating at least one key at the request of a local registration authority with which the key generating center communicates;
- a wake up mechanism;
- and
- a key server configured to create at least one key for each user based on one or more attributes associated with said user, wherein said one or more attributes comprises a status attribute capable of having any one of the following values:
- pending, in progress, process ended with an error message, process done, sending a creation request and done;
- wherein said one or more attributes further comprises a scheduling attribute for indicating that said symmetric key is periodically generated responsive to said wake up mechanism;
- and
- wherein said computer processing system is configured to form said created request of a local registration authority by creating each individual creation request from a corresponding multiple creation request recorded in the storage means relative to a set of users belonging to a preset list, or to a set of users defined by predetermined criteria, as well as relative to model pairs of keys for either of said sets of users.
A non-transitory computer readable medium upon which is embodied a set of programmable instructions which, when executed by a processor, cause the processor to perform operations for creating and managing symmetrical cryptographic keys, wherein a symmetrical cryptographic key can be used to both encode and decode data, and wherein each key is intended for a user managed by a computer system, comprising:
- searching in storage means for at least one user for which a symmetric key must be created, each user associated with one or more attributes comprising a status attribute and a scheduling attribute, wherein said status attribute is capable of having any one of the following values:
- pending, in progress, process ended with an error message, process done, sending a creation request and done;
- creating, based on said one or more attributes, at least one individual creation request for creating a symmetric key for said user, said creating further comprising periodically executing said individual creation request based on said scheduling attribute;
- transmitting a key generating request corresponding to said individual creation request to a key generating center;
- issuing, by said key generating center, a symmetric key in accordance with said transmitted key generating request;
- and
- creating each of said individual creation requests from a corresponding multiple creation request recorded in the storage means relative to a set of users belonging to a preset list, or to a set of users defined by predetermined criteria, as well as relative to model pairs of keys for either of said sets of users.
Dependencies are inferred from the claim text.