Patent ID: 8393001

Claim:
A method for securely generating signatures, comprising: receiving, at a secure server from a first computer, a request including authentication information to generate a signature at the secure server; receiving, at the secure server from the first computer, an update for a second computer in association with the request; determining at the secure server whether the authentication information has been compromised; generating, in response to the request, the signature utilizing a private key stored at the secure server, and further encrypting the update after receipt of the request and the update at the secure server, the encrypting utilizing the private key; transmitting the signature and the encrypted update from the secure server to the first computer; distributing the encrypted update and the signature from the first computer to the second computer; and utilizing the signature, verifying an authenticity of the encrypted update for the second computer utilizing a public key, the private key at the secure server being inaccessible to the first computer and the second computer.