Method for improved key management for ATMs and other remote devices

1. A computer implemented method for securely transferring symmetric cryptographic keys to other devices, wherein said method utilizes a data structure comprising instructions that are cryptographically protected against alteration or misuse, wherein said instructions further comprise a trusted block that defines specific key management policies that are permitted when applications employ said trusted block to generate or export said symmetric cryptographic keys, and wherein said applications comprise:

application programming interfaces (API);

embedded firmware;

operating system code;

and hardware configured operations; and

wherein said applications further comprise:

a Trusted_Block_Create (TBC) function;

a Remote_Key_Export (RKX) function;

wherein said TBC function creates said trusted block; and

wherein said RKX function uses said Trusted Block to generate or export symmetric keys according to a set of parameters in said Trusted Block; and

wherein said trusted block has a number of fields containing rules that provide an ability to limit how said trusted block is used, thereby reducing the risk of said trusted block being employed in unintended ways or with unintended keys; and

wherein said method comprises:

receiving instructions from at least two separate individuals in order to create said trusted block.

2. The method according to claim 1 , wherein said trusted block has a data structure comprising: zero or one trusted public key section, zero or more rule sections, zero or one trusted block label section, one trusted block information section, and zero or one application defined data section.

3. The method according to claim 1 , wherein said trusted block is protected by a MAC that is computed over the contents of said data structure; and

wherein said trusted block contains a public key and optional rules to control export of other keys associated with said other device(s) that use that public key; and

wherein for remote key distribution, said public key will be the root certification key for the other device, and said public key will be used to verify the signature on public key certificates for individual devices; and

wherein it is also possible for the Trusted Block to be used simply as a trusted public key container, in which case said public key in said trusted block will be used in functions such as Digital Signature Verify.

4. The method according to claim 1 , wherein said rules in said trusted block further comprise a function to generate or export said symmetric cryptographic keys; and

wherein said function to generate or export said symmetric cryptographic keys is said RKX function; and

wherein said RKX function creates a RKX token; and

wherein said RKX token holds said symmetric cryptographic keys so as to bind them to said trusted block, and allows sequences of RKX calls to be bound together as if they are an atomic operation.

5. The method according to claim 1 , wherein said RKX function provides for secure transport of said symmetric keys from a security module to another device.