Patent ID: 7225161
Filing Date: 2007-05-29
Classification: G06Q,H04L

Abstract:
1. A method for securing encryption keys in a key management system (KMS) comprising: receiving data into the KMS, wherein the data comprises a key, a key name, and a key type, and wherein the data is received from a client over a network; receiving at least one key encryption key (KEK) into the KMS, wherein the KEK is received from the client using a smart card interfacing over the network with the KMS, wherein the smart card stores the KEK; encrypting the key, the key name, and the key type using the KEK to generate a secret token, wherein the encryption is performed by the KMS; hashing the KEK to generate a hashed KEK; generating a vector comprising the secret token and the hashed KEK, wherein the secret token comprises the encrypted key; serializing the vector to generate a serialized file; and storing the serialized file in KMS memory.