Patent ID: 11909889
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 17:
18. Computer-storage memory comprising executable instructions that cause one or more processors to perform operations for authenticating a client to access a secure resource on a remote device using a public key and a private key, wherein the private key is stored in a hardware security module (HSM) away from the client, the operations comprising:
storing the private key in the HSM;
receiving a request from the client for a digital signature to access the secure resource;
generating the digital signature using, in part, the private key in the HSM;
generating a security token using the digital signature;
authenticating the client to access a remote resource using the security token;
determining to change the private key in the HSM;
issuing a new private key; and
replacing the private key in the HSM with the new private key.