Patent ID: 8364952

Claim:
A method comprising: storing a key recovery plan associated with a token comprising a plurality of lost status states, wherein each of the plurality of lost status states comprises at least one of a plurality of subject keys, an action to be taken for each of the plurality of subject keys or a token action; receiving a unique identifier associated with the token; identifying at least one of the subject keys associated with the token based on the unique identifier; receiving an indication that the token was lost and a reason that the token was lost; selecting, by a hardware processor, a key recovery plan based on the reason that the token was lost, wherein the key recovery plan identifies an action to be taken with the at least one subject key and wherein the action corresponds to the reason that the token was lost, and wherein the action to be taken is to recover at least one prior subject key associated with the same token; and wherein the action further comprises: generating a new subject key and certificate to be associated with the token and managing a certificate associated with the at least one prior subject key.