Auditing secret key cryptographic operations
View Patent ↗In a cryptographic system, the unlocking of secret keys on a user system is audited and correlated with other events that typically occur after the secret key is used to perform a cryptographic operation. Audit evidence of secret key cryptographic operations is recorded for later review and/or analysis, for use as stored evidence of unauthorized activity and/or for use in refuting false claims of repudiation of authorized activity. Some systems might also provide users with user activity reports that can alert a user to suspicious or unauthorized activity using that user's access.
1. A key auditing system, comprising:
a key server, that provides access to a secret key by an authorized user;
a resource server, that provides access to resources to authorized users, wherein authorization of a user is determined, at least in part, by the user's possession of the secret key;
a key server audit database;
a resource server audit database; and
a usage analyzer that analyzes the key server audit database and the resource server audit database to compare events therein;
wherein the key server maintains a protection key usable to unlock the secret key held by a user workstation and the resource server is configured to block access to a resource unless an indication of the unlocking of the secret key at the user workstation is provided.
2. The key auditing system of claim 1 , wherein the resource server is an application server.
3. The key auditing system of claim 1 , wherein the resource server is a transaction server.
4. The key auditing system of claim 1 , wherein the secret key is such that it is only accepted within a pre-determined time period.
5. The key auditing system of claim 1 , wherein events are compared according to a profile that specifies conditions under which particular keys can be used.
6. The key auditing system of claim 5 , wherein the conditions include time delay limits between when a particular key is accessed and when the particular key is used.
7. The key auditing system of claim 5 , wherein the conditions include limits on a number of times that the particular key can be used on a resource server in a given session.
8. The key auditing system of claim 5 , wherein the conditions include whether usage of the particular key would be allowed where access to the particular key is from a first network address or first location and usage of the particular key is from a second network address distinct from the first network address or from a second location distinct from the first location.
9. The key auditing system of claim 1 , wherein the usage analyzer is configured to analyze and compare audit database records in real-time.
10. The key auditing system of claim 9 , wherein the usage analyzer is configured to disable usage of a particular key in real-time response to audit database record comparisons.
11. The key auditing system of claim 1 , wherein the usage analyzer is configured as part of the key server.