Patent ID: 9331990
Filing Date: 2016-05-03
CPC Classification: G06F,G06Q,H04L

Claim Text:
1. A method for issuing a trustworthy digital certificate comprising: functionally coupling a security token to a computer system, the security token being in processing communications with at least a registration authority via the computer system; sending from the computer system a digital certificate generation request to the registration authority, wherein the digital certificate generation request includes at least one of: an entity identifier or a security token identifier, and wherein: the security token receives the PKI key pair generation command and generates a PKI key pair that includes a public key; after completion of the PKI key pair generation, the PKI key pair is operatively stored in the security token and the public key of the PKI key pair is sent to the registration authority along with a value based on a proof of token key, wherein the value provides assurances to the registration authority that the PKI key pair was generated within a secure domain of the security token; establishing a secure end-to-end communications channel between the security token and the registration authority; and upon successfulness of the security transaction including confirmation of the value, the registration authority activates the generation of the digital certificate by a certificate authority using the public key, wherein the registration authority sends the PKI key pair generation command to the security token which causes the security token to generate the PKI key pair and return the public key of the PKI key pair to the registration authority after the secure end-to-end communications channel is established.