Method and system for ordering and delivering digital certificates

1. A method for ordering a digital certificate by a user and for delivering the certificate to the user, comprising:

generating a secret certificate PIN using a certification unit,

storing an order placed by the user and assigning the secret certificate PIN to the order,

transmitting the secret certificate PIN, which is otherwise known only to the certification unit, from the certification unit to the user,

transmitting the secret certificate PIN, data making it possible to determine the order and a certificate support device identification, from the user to the certification unit, and

transmitting the digital certificate ordered by the user or a reference to the digital certificate ordered by the user from the certification unit to a certificate support device of the user, identified by the certificate support device identification, when the certification unit receives the certificate PIN,

wherein the certificate support device enables the user to receive the digital certificate from the certification unit and be authenticated.

2. The method according to claim 1 , further comprising:

transmitting personal data of the user to the certification unit when ordering the certificate,

authenticating the user through a registration unit, and

confirming an assignment of the personal data to the user to the certification unit by the registration unit.

3. The method according to claim 2 , further comprising: generating a pair of cryptographic keys, including a private key and a public key, by a key generating unit outside the certificate support device,

making the public key accessible to the certification unit,

generating the certificate by the certification unit through certification of the public key, and

transmitting the private key to the certificate support device.

4. The method according to claim 1 , further comprising:

generating a pair of cryptographic keys, including a private key and a public key, in the certificate support device,

transmitting the public key to the certification unit, and

generating the certificate by the certification unit through certification of the public key.

5. The method according to claim 1 , further comprising: generating a pair of cryptographic keys, including a private key and a public key, by a key generating unit outside the certificate support device,

making the public key accessible to the certification unit,

generating the certificate by the certification unit through certification of the public key, and

transmitting the private key to the certificate support device.

6. A system comprising:

means for receiving at least one order each for a digital certificate from a multiplicity of users,

means for generating in a certification unit a secret certificate PIN for each order,

means for transmitting from the certification unit to a respective one of users corresponding to each order the secret certificate PIN corresponding to the order which is otherwise known only to the certification unit,

means for transmitting a certificate when the secret certificate PIN is transmitted to the certification unit,

means for storing orders placed by the users in the certification unit and assigning to each order the secret certificate PIN generated therefor,

means for receiving in the certification unit the secret certificate PIN, indications making it possible to determine the order, and a certificate support device identification, and

means for transmitting a digital certificate ordered by the user or a reference to the digital certificate ordered by the user from the certification unit to a certificate support device of the user identified by the certificate support device identification,

wherein the certificate support device enables the user to receive the digital certificate from the certification unit and be authenticated.

7. The system according to claim 6 , further comprising means for receiving personal data from the respective user during ordering of a certificate and making them accessible to the certification unit, and further comprising a registration unit configured to authenticate the respective user and confirm to the certification unit an assignment of the personal data to the respective user.

8. The system according to claim 7 , further comprising a key generating unit, which generates a pair of cryptographic keys, including a private key and a pubic key, and makes the public key accessible to the certification unit, the certification unit comprises means for generating the certificate through certification of the public key, and the system comprises means for transmitting the private key to the certificate support device.

9. The system according to claim 6 , further comprising means for receiving from the certificate support device of a respective user a public key and for transmitting the public key to the certification unit, the public key forming together with a private key a cryptographic key pair that has been generated in the certificate support device, and the certification unit comprises means for generating the certificate through certification of the public key.

10. The system according to claim 6 , further comprising a key generating unit, which generates a pair of cryptographic keys, including a private key and a pubic key, and makes the public key accessible to the certification unit, the certification unit comprises means for generating the certificate through certification of the public key, and the system comprises means for transmitting the private key to the certificate support device.