Patent ID: 7725928

Claim:
A system for establishing temporary and permanent credentials for secure remote data access, the system comprising: a temporary smart card configured to provide a temporary credential for a first insecure device, thereby providing the first insecure device with temporary secure access to a remote data source when the temporary smart card is used with the first insecure device, wherein the first insecure device loses the temporary secure access as soon as the temporary smart card is removed from the first insecure device; an enrollment smart card configured to provide a permanent credential for a second trusted device, thereby providing the second trusted device with permanent secure access to the remote data source, wherein the second trusted device installs a certificate chain during enrollment and transmits certificates associated with the installed certificate chain to access the remote data source after the enrollment without presence of the enrollment smart card or the temporary smart card; and wherein when the temporary smart card or the enrollment smart card is lost, a certificate revocation list is configured to include: a certificate [pub T ] E which contains a public key pub T for the temporary smart card signed with a private key priv E for the enrollment smart card; and a certificate [pub E ] F which contains a public key pub E for the enrollment smart card signed with a private key priv F for the temporary smart card.