Patent ID: 8989383
Filing Date: 2015-03-24
Classification: H04L

Abstract:
1. A method comprising: providing digital data for being transmitted to a recipient system via a communications network; digitally signing the digital data using N cryptographic keys comprising first and second cryptographic keys, each of the N cryptographic keys being a private cryptographic key associated with a sender of the digital data, and N>1; transmitting the digitally signed digital data to the recipient system via the communications network; receiving from the recipient an indication that the first cryptographic key is compromised, wherein the second cryptographic key is uncompromised; generating a new first replacement cryptographic key for the first compromised key; encrypting the new first replacement cryptographic key using the second uncompromised cryptographic key; transmitting the encrypted new first replacement cryptographic key to the recipient; receiving from the recipient a key replacement confirmation message digitally signed by the new first replacement cryptographic key; and, verifying the digital signature of the key replacement confirmation message based on the new first replacement cryptographic key.