Methods of and systems for facilitating decryption of encrypted electronic information

A system for facilitating decryption of an encrypted electronic message, the system comprising a first processor and a local cache, wherein the system is configured to:

• receive, using the first processor, a primary encrypted session key, wherein the primary encrypted session key is generated based on a primary credential corresponding to an authorized recipient of the encrypted electronic message, wherein the primary credential corresponds to a primary public key;
• retrieve, using the first processor, a primary private key corresponding to the primary credential;
• store the primary private key in the local cache;
• decrypt, using the first processor, the primary encrypted session key based on the primary private key to obtain an unencrypted session key;
• and
• facilitate, using the first processor, provision of a decrypted electronic message at an electronic device corresponding to the authorized recipient based on each of the unencrypted session key and a secondary credential corresponding to the authorized recipient, wherein the secondary credential is issued to the authorized recipient based on a validation of the primary credential;
• and
• authenticating the electronic device based on the secondary credential, wherein retrieving the primary private key is based on at
• least a part of the secondary credential, wherein facilitating provision of the decrypted electronic message comprises providing the unencrypted session key to the electronic device.

A non-transitory computer readable medium for executing a method for facilitating decryption of an encrypted electronic message at an electronic device corresponding to an authorized recipient of the encrypted electronic message, the non-transitory computer readable medium having program code recorded thereon such that when

• placed in communicable contact with a processor comprised in the electronic device, the processor performs the steps of:
• extracting a primary encrypted session key from the encrypted electronic message, wherein the primary encrypted session key is generated based on a primary credential corresponding to the authorized recipient, wherein the primary credential corresponds to a primary public key;
• transmitting each of the primary encrypted session key and at least a part of secondary credential to an external server, wherein the secondary credential provides authentication of the electronic device with a Level of Assurance (LOA) being at least Level-3 as defined in E-Authentication Guidance for Federal Agencies (OMB 04-04), wherein the secondary credential is issued to the authorized recipient based on a validation of the primary credential;
• receiving an unencrypted session key from the external server;
• facilitating decryption of the encrypted electronic message based on the unencrypted session key;
• and
• authenticating the electronic device based on the secondary credential, wherein retrieving the primary private key is based on at
• least a part of the secondary credential, wherein facilitating provision of the decrypted electronic message comprises providing the unencrypted session key to the electronic device.

A method of facilitating decryption of an encrypted electronic message, the method comprising:

• receiving a primary encrypted session key, wherein the primary encrypted session key is generated based on a primary credential corresponding to an authorized recipient of the encrypted electronic message, wherein the primary credential corresponds to a primary public key;
• retrieving a primary private key corresponding to the primary credential;
• decrypting the primary encrypted session key based on the primary private key to obtain an unencrypted session key;
• encrypting the unencrypted session key based on a secondary credential to obtain a secondary encrypted session key, wherein the secondary credential corresponds to the authorized recipient wherein the secondary credential is issued to the authorized recipient based on a validation of the primary credential;
• and
• providing the secondary encrypted session key to the electronic device for facilitating decryption of the encrypted electronic message;
• and
• authenticating the electronic device based on the secondary credential, wherein retrieving the primary private key is based on at
• least a part of the secondary credential, wherein facilitating provision of the decrypted electronic message comprises providing the unencrypted session key to the electronic device.