Patent ID: 6959390

Claim:
A method in a data processing system for maintaining multiple secure user private keys in a non-secure storage device, said method comprising the steps of: establishing an encryption device having an encryption engine and a protected storage device, wherein said protected storage device is accessible only through said encryption engine; establishing a master key pair for said system, said master key pair including a master private key and a master public key; storing said master key pair in said protected storage device; establishing a unique user key pair for each of multiple users, each of said user key pairs including a user private key and a user public key; said encryption engine encrypting each of said user private keys utilizing said master public key; storing each of said encrypted user private keys in said non-secure storage device, wherein each of said encrypted user private keys is secure while stored in said non-secure storage device; in response to receiving a message to transmit to a recipient, said encryption engine decrypting a particular user's private key utilizing said master private key; said encryption engine encrypting said message utilizing said decrypted particular user's private key and said recipient's public key; and transmitting said encrypted message to said recipient.