CLOUD HARDWARE SECURITY MODULES FOR OUTSOURCING CRYPTOGRAPHIC OPERATIONS

摘要

A method for processing a cryptographic operation request (250) includes receiving, at a hardware security module (HSM) (200), the cryptographic operation request comprising a cryptographic key (120) and at least one authorization token (220), determining, by the HSM, whether an access control list (ACL) (214) associated with the cryptographic key of the cryptographic operation request is authorized to govern access to the cryptographic key, and validating, by the HSM, the at least one authorization token. When the at least one authorization token is valid and the ACL is authorized to govern access to the cryptographic key of the cryptographic operation request, the method includes processing, by the HSM, the cryptographic operation request.