Patent ID: 8370444
Filing Date: 2013-02-05
Classification: H04L

Abstract:
1. A method comprising the steps of: a) receiving a PKI email account request from a user via a PKI email account website hosted on one or more computers in a network and displayed on a client computer, wherein the client computer does not store or recall PKI keys; b) generating and storing, without interaction from the user and responsive to a keypair generation request by the PKI email account website, a keypair comprising a private key and a public key, wherein the keypair is generated by and stored in a keystore system comprising a keypair generation software and a data storage hosted on the one or more computers; c) generating and sending a certificate signing request comprising the public key and a distinguished name, without interaction from the user, from the keystore system to a certificate authority, wherein the certificate authority automatically trusts one or more certificate signing requests from the keystore system and wherein the certificate authority is hosted on the one or more computers hosting the keystore system; d) installing a signed certificate from the certificate authority, wherein the signed certificate is received, installed and stored by the keystore system; and e) creating a PKI email account for the user, wherein the PKI email account is configured to access one or more cryptographic functions stored in the keystore system to securely receive and transmit mail, wherein the PKI email account is accessible to an email website and wherein the email website is displayed on the client computer, configured to read and send email messages and accessible to any computer connected to the Internet.