Patent ID: 8971539
Filing Date: 2015-03-03
Classification: G06F,H04L

Abstract:
1. A computer-implemented method of securely providing a private key escrow service, comprising: providing, at a server of a private key escrow service provider, a user interface to enable a private key holder to manage a plurality of private keys, the user interface including a secure upload webpage to enable a private key holder to upload an encrypted copy of a private key for storage; receiving, at the server of the private key escrow service provider, the encrypted copy of the private key from the private key holder via the secure upload webpage; storing the encrypted copy of the private key in memory associated with the private key escrow service provider; providing, by the private key escrow service provider, a secure decryption webpage for the private key holder to enable the private key escrow service to decrypt the encrypted copy of the private key; receiving, via the user interface at the server of the private key escrow service provider, an instruction to decrypt the encrypted copy of the private key from the private key holder through the secure decryption webpage, wherein the instruction to decrypt includes an instruction to use the decrypted private key by the server of the private key escrow service provider; and decrypting, by the private key escrow service provider, the encrypted copy of the private key in response to the instruction to decrypt the encrypted copy of the private key, wherein decrypting the encrypted copy of the private key further comprises: accessing an unencrypted form of the private key; and using the unencrypted private key to securely communicate with one or more clients, wherein using the unencrypted private key to securely communicate with one or more clients comprises using the unencrypted private key to mitigate against a Secure Sockets Layer (“SSL”) Denial-of-Service (“DoS”) or Distributed Denial-of-Service (“DDoS”) attack, wherein the SSL DoS or DDoS attack comprises an attack against one or more servers of the private key holder.