PROTECTED DISTRIBUTION PROTOCOL FOR KEYING AND CERTIFICATE MATERIAL

摘要

Disclosed is a computer system and a method for the protected distribution ofcertificate and keying material between a certification authority and at leastone entity in the certification authority's domain, comprising the steps ofsending keying material, including a password, generated by the CertifyingAuthority to the entity via a secure medium; generating and protecting, by theentity, a public and a private key pair using the keying material provided itby the certifying authority; generating, protecting and sending a request fora certificate to the certifying authority using the keying material providedit by the certifying authority; requesting, by the certifying authority, thatthe public key and address of the entity be sent to the certifying authority;protecting and sending the public key and address of the entity to thecertifying authority using the keying material provided it by the certifyingauthority; assembling and issuing the certificate to the entity from thecertifying authority and recording the public key of the entity at thecertifying authority for public use within the domain of the certifyingauthority.