Patent ID: 7689828
Filing Date: 2010-03-30
Classification: H04L

Abstract:
1. A method for implementing transactions from a signing entity over a network to a receiving entity using digital signatures, the method comprising the steps: a) providing instructions to the receiving entity for performing a transaction; b) generating a new asymmetric key pair as and when a digital signature is needed, wherein the new asymmetric key pair comprises a new private key and a public key by an One Time Private Key (OTPK) module, and wherein the new private key is randomly generated at possession of the signing entity; c) generating the digital signature using the new private key; d) generating a certification request containing the public key; e) irretrievably deleting the new private key; f) sending the certification request to an authentication and certification server; g) receiving a digital certificate from the authentication and certification server certifying ownership of the public key; and h) sending the digital signature together with the digital certificate to the receiving entity; wherein each new private key is used to generate the digital signature only once; and the new private key never leaves the possession of the signing entity.