Patent ID: 8108670
Filing Date: 2012-01-31
Classification: H04L

Abstract:
1. A method, comprising: determining, by a client device, that a current certificate associated with the client device or a user of the client device is about to expire or has expired, with the current certificate being stored in the client device and further associated with a key pair including a current public key and a current private key; instantiating, by the client device, a secure memory partition in a memory of the client device in response to said determining; downloading, by the client device, a key manager from a software server via a network communicatively coupling the client device and the software server; installing, by the client device, the key manager into the secure memory partition; identifying, by the key manager, encrypted information stored in a storage location of the client device, the encrypted information being encrypted with the current public key of the key pair associated with the current certificate that is about to expire or has expired; transferring, by the key manager, the identified encrypted information from the storage to the secure memory partition; decrypting the encrypted information in the secure memory partition, by the key manager, using the current private key of the key pair to obtain unencrypted information; re-encrypting, by the key manager, the unencrypted information in the secure memory partition using a new key; transferring, by the key manager, the re-encrypted information from the secure memory partition to the storage location of the client device; and removing, by the client device, the secure memory partition in response to said transferring of the re-encrypted information.