Protected Distribution Protocol for Keying and Authentication (Keying and Certificate Meterial)

摘要

The present invention relates to a computer system and method for secure distribution of verification and keying data between a verification authorization side and at least one entity within the domain of the verification authorization side, comprising the steps of: Transmitting keying material having a password, generated by a certification authority, to an entity via a secure medium; Generating and protecting a public and private key pair by the entity using keying data provided by a certification authority; Generating and protecting a request for verification using the keying data provided by the verification authority and transmitting the verification request to the verification authority; requesting the verification authority to transmit the entity's public key and address to the verification authority step; Protecting the entity's public key and address using the keying data provided by the authentication-authorization side and sending it to the authentication-authorization side; And gathering the assertion and raising it from the assertion side to the entity and recording the entity's public key on the public assertion side within the domain of the assertion side.