Patent ID: 8156190

Claim:
A system comprising: a) a PKI email account website displayed on a client computer and hosted on one or more computers in a network, wherein the client computer does not store or recall PKI keys, and wherein the PKI email account website is configured to: i) receive a PKI email account request from one or more users, wherein the PKI email account request is the only interaction required by the one or more users to create one or more PKI email accounts; ii) generate and send a certificate signing request to a certificate authority which does not interact with the one or more users; iii) receive and install, on the PKI email website, a certificate issued and signed by the certificate authority; iv) store and recall one or more PKI keys without interaction from the one or more users; and v) create the one or more PKI email accounts, wherein the one or more PKI email accounts are configured to access one or more cryptographic functions, without transmitting PKI digital keys through the network, wherein the one or more PKI email accounts are accessible to an email website, and wherein the email website is configured to read and send email messages.