Patent ID: 8615081

Claim:
A computer program product for key creation, the computer program product comprising: a tangible non-transitory storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method, comprising: sending a first public key part from a first system to a second system; receiving a second public key part sent by the second system to the first system; establishing a first secret material in the first system using the first and second public key parts and a local private key part on the first system, and establishing a second secret material in the second system using the first and second public key parts and a local private key part on the second system, wherein the first secret material is identical to the second secret material; binding key control information to the first secret material in the first system, wherein the key control information comprises information relating to key type and key management; and deriving a first key material from a combination of the key control information and the first secret material, wherein the first key material is identical to a second key material derived by the second system, and wherein the second key material is derived from the second secret material and key control information that are bound in the second system.