Patent ID: 9276754
Filing Date: 2016-03-01
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method for key management, comprising: in response to receiving a request for a key and an identifier of a class of keys from a client over an external network, generating an asymmetric keypair by a key management system for distribution to a computing resource over an internal network, the keypair unavailable for use by the client until processed through a workflow, the computing resource accessible to the client over the external network, the class of keys corresponding to a workflow template associated with a workflow management system for preparing the keypair to become active, the class of keys comprising at least one of: a characteristic of the keypair or a use of the keypair; associating the keypair with the class of keys by the key management system based at least in part on the identifier of the class of keys; communicating, by the key management system over the internal network, the generation of the keypair to the workflow management system, the workflow management system configured to select the workflow template based at least in part on the identifier of the class of keys and to generate and process the workflow for the keypair based at least in part on the workflow template; and activating, by the key management system, the keypair for use after the workflow has completed, the activating comprising distributing the keypair to the computing resource over the internal network and sending a notification to the client that the keypair is available for use without sending the keypair to the client.