Methods and systems for increasing the security of private keys

1. A method for increasing the security of private keys comprising:

generating transaction data using a device operated by a user;

processing the transaction data;

requesting, by a private key computer, that permission be obtained from the user to use a private key, the private key being associated with the user and with a public-private key pair and being stored in the computer;

authenticating, by an authentication system, the user when user permission is obtained;

applying, by the computer, the private key to data derived from the transaction data when the authentication system determines that biometric data captured from the user matches user enrollment authentication data, and transmitting the derived data to the device; and

conducting a transaction with the transaction data.

2. A method for increasing the security of private keys in accordance with claim 1 , further comprising:

determining a type of transaction associated with the transaction data;

determining a location of private keys of the user; and

identifying the private key as one of the private keys, the one private key corresponding to the type of transaction.

3. A method for increasing the security of private keys in accordance with claim 1 , said processing operation comprising:

associating a certificate of the user with the transaction data, the transaction data being an e-mail message;

determining a location of the private key;

generating an identifier for the transaction data; and

calculating a hash of the transaction data, the calculated hash being the derived data.

4. A method for increasing the security of private keys in accordance with claim 1 , the transaction data being an e-mail message, the method further comprising:

generating a signed e-mail message and transmitting the signed e-mail message to a device operated by a recipient;

determining whether a certificate included in the received e-mail message is valid; and

determining the trustworthiness of the received e-mail message after the certificate is determined to be valid.

5. A method for increasing the security of private keys in accordance with claim 4 , said determining the trustworthiness operation comprising:

determining a hash of the signed e-mail message calculated prior to transmission;

calculating a hash of the received e-mail message;

comparing the hash of the signed e-mail message against the calculated hash; and

determining the e-mail message is trustworthy when the hashes match.

6. A method for increasing the security of private keys in accordance with claim 1 , the transaction data being an e-mail message, said processing operation comprising:

specifying at least one recipient of the e-mail message;

generating a session key for the e-mail message;

encrypting the session key with a public key of the at least one recipient;

encrypting the e-mail message with the encrypted session key; and

transmitting the encrypted e-mail message to the at least one recipient.

7. A method for increasing the security of private keys in accordance with claim 6 , said applying operation comprising:

decrypting the session key with a private key of the at least one recipient; and

transmitting the decrypted session key to the recipient.

8. A method for increasing the security of private keys in accordance with claim 1 , the transaction data being an e-mail message, said conducting operation comprising:

receiving a session key at a second device;

decrypting the e-mail message with the session key; and

displaying contents of the e-mail message for a recipient operating the second device to see.

9. A computer system for increasing the security of private keys comprising:

at least one client device configured to generate public-private key pairs, and to generate and process transaction data;

at least one communications device configured to at least capture authentication data;

a private key computer system configured to store private keys, decrypt messages, decrypt documents and communicate with said at least one client device;

an authentication system comprising an authentication database and being configured to authenticate users, store enrollment data records of users, and communicate with said at least one communications device, said at least one client device, and said private key computer system; and

an e-mail server configured to communicate with said at least one client device and said at least one communications device,

said private key computer system being further configured to determine whether permission has been obtained from a user operating said at least one client device to use a private key of the user,

said authentication system being further configured to authenticate the user when user permission is obtained,

said private key computer system being further configured to apply the private key to data derived from the transaction data when said authentication system determines that biometric data captured from the user matches user enrollment authentication data, and

said at least one client device being further configured to receive the derived data after the private key is applied.

10. A computer system for increasing the security of private keys in accordance with claim 9 , said client device being further configured to:

calculate a hash of the transaction data, the transaction data being an e-mail message; and

generate a session key for the e-mail message.

11. A computer system for increasing the security of private keys in accordance with claim 9 , said private key computer system being further configured to:

sign a hash of the transaction data, the hash calculated by said at least one device; and

transmit the signed hash to the at least one client device.

12. A computer system for increasing the security of private keys in accordance with claim 11 , said at least one client device being further configured to:

generate a signed e-mail message; and

transmit the signed e-mail message to a client device operated by a recipient of the e-mail message, the client device operated by the recipient being different than the client device operated by the user.

13. A computer system for increasing the security of private keys in accordance with claim 12 , said different device being configured to:

determine whether a certificate included in the received e-mail message is valid; and

determine the trustworthiness of the received e-mail message after the certificate is determined to be valid.

14. A computer system for increasing the security of private keys in accordance with claim 13 , said client device operated by the recipient being configured to:

determine the hash of the transmitted e-mail message;

calculate a hash of the received e-mail message;

compare the signed hash of the transmitted e-mail message against the calculated hash; and

determine the received e-mail message is secure when the hashes match.

15. A non-transitory computer-readable recording medium included in a private key security computer system for enabling increased security of private keys, the computer readable medium being comprised of instructions, which when read and executed by the private key security computer system, cause the private key security computer system to:

generate transaction data for a user;

determine whether permission has been obtained from the user to use a private key of the user, the private key being the private key included in a public-private key pair of the user;

authenticating the user when user permission is obtained;

apply the private key to data derived from the transaction data when biometric data captured from the user matches user enrollment authentication data; and

conduct a transaction with the transaction data.

16. A non-transitory computer-readable recording medium in accordance with claim 15 further comprising instructions, which when read and executed by the private key security computer system, cause the private key security computer system to:

determine a type of transaction associated with the transactions;

determine a location of private keys of the user; and

identify the private key as one of the private keys, the one private key corresponding to the type of transaction.