Certificate authority server protection

1. A method enabling authentication over a communication network comprising:

creating by a first device an authentication certificate including an electronically formatted public key and an electronically formatted private key;

storing by the first device the electronically formatted private key in a memory of the first device;

sending by the first device the electronically formatted public key to a certificate authority gateway;

converting by the certificate authority gateway the electronically formatted public key into a non-electronically formatted public key;

sending by the certificate authority gateway the non-electronically formatted public key to a certificate authority server, wherein the certificate authority server is electrically and physically isolated from the certificate authority gateway via a boundary of a secure area;

converting by the certificate authority server the non-electronically formatted public key back to the electronically formatted public key and storing by the certificate authority server the electronically formatted public key in a memory of the certificate authority server;

signing by the certificate authority server the electronically formatted public key to produce a signed electronically formatted public key;

storing by the certificate authority server the signed electronically formatted public key in the memory of the certificate authority server;

retrieving by the certificate authority server the signed electronically formatted public key from the memory of the certificate authority server and converting by the certificate authority server the signed electronically formatted public key to a signed non-electronically formatted public key;

sending by the certificate authority server the signed non-electronically formatted public key to the certificate authority gateway;

converting by the certificate authority gateway the signed non-electronically formatted public key to the signed electronically formatted public key;

sending by the certificate authority gateway the signed electronically formatted public key to a distribution service;

sending by the distribution service the signed electronically formatted public key to a second device, wherein the second device uses the signed electronically formatted public key in establishing an authenticated communicate link via the communication network with the first device; and

wherein communicating by the certificate authority gateway the non-electronically formatted public key across the boundary of the secure area to the certificate authority server, and communicating by the certificate authority server the signed non-electronically formatted public key across the boundary of the secure area to the certificate authority gateway, said communications via a non-electrical communication format to prevent any electronic attacks on the certificate authority server.

2. The method of claim 1 , wherein the memory of the first device is a persistent memory.

3. The method of claim 1 , wherein the non-electronically formatted public key is a QR code displayed on a physical medium including printed on paper or displayed on a monitor.

4. The method of claim 1 , wherein sending by the certificate authority gateway the signed electronically formatted public key directly to the first device, and sending by the first device the signed electronically formatted public key directly to the second device, bypassing the distribution service.

5. The method of claim 1 , wherein the secure area includes a pass thru feature that allows the non-electronically formatted public key to be communicated across the boundary of the secure area.

6. The method of claim 1 , wherein the secure area comprises a physically isolated area including a locked room, or a safe.

7. The method of claim 1 , wherein the secure area includes a clear window that allows the non-electronically formatted pubic key to communicate across the boundary of the secure area via the non-electrical communication format including to be viewed and captured by an optical device.

8. The method of claim 1 wherein a public key in an electronic format is converted to a public key detectable in a non-electrical communication format including at least one of an acoustic signal, a physical motion, an olfactory sense, a chemical signature, or a quantum effect.

9. A system to enable authentication over a communication network comprising:

a first computing device creating an authentication certificate including an electronically formatted public key and an electronically formatted private key;

the communication network;

the first computer device coupled to the communication network;

the first computer device coupled to a certificate authority gateway;

the certificate authority gateway coupled to a certificate authority server, wherein the certificate authority server is electrically and physically isolated from the certificate authority gateway via a boundary of a secure area;

a second computer device coupled to the communication network, wherein the second computer device requests a signed pubic key of the first computer device from the certificate authority server via the communication network, and uses the signed public key of the first computing device, which has been signed by the certificate authority server, to establish an authenticated communicate link via the communication network with the first computing device;

wherein the certificate authority gateway communicates a non-electronically formatted public key across the boundary of the secure area to the certificate authority server, and the certificate authority server communicates a signed non-electronically formatted public key across the boundary of the secure area to the certificate authority gateway, said communications via a non-electrical communication format to prevent any electronic attacks on the certificate authority server.

10. The system of claim 9 , wherein the communication network comprises wired and wireless public and private network including Internet, intranet, telecommunications system, cellular network, or other network capable of transmitting electronic data.

11. The system of claim 9 , wherein the secure area includes a pass thru feature that allows a non-electronically formatted public key to pass across a boundary of the secure area.

12. The system of claim 9 , wherein the first computing device, the second computing device, the certificate authority gateway, and the certificate authority server comprise a smart phone, a tablet PC, a notebook PC, a desktop PC, a remote monitoring device, a cameras, sensor, a remote controlled vehicle, or any other device that processes and transmits data.

13. The system of claim 9 , wherein the first computing device, the second computing device, the certificate authority gateway, and the certificate authority server comprise components including memory, processors, and radios, and software including a user-based application software, a library file, a command line tool, a virtual machine, and an operating system.

14. The system of claim 9 , wherein the first computing device and the second computing device include an authentication key generator that generates both a public key and a private key each in an electronic format.

15. The system of claim 9 , wherein the certificate authority gateway and the certificate authority server include a key conversion logic that converts an electronically formatted public key to a non-electronically formatted public key and converts the non-electronically formatted public key back to the electronically formatted public key.

16. The system of claim 15 , wherein the key conversion logic comprises a QR code writer-reader in which the electronically formatted public key is converted to a QR code that is written on a paper or displayed on a monitor and a QR code reader that takes the QR code and converts the QR code back to an electronically format public key.

17. The system of claim 9 , wherein the secure area includes a locked room or a safe.

18. The system of claim 17 , wherein the secure area includes a pass thru feature that allows non-electronically formatted public key to be communicated across a boundary of the secure area.

19. The system of claim 18 , wherein the secure area includes a clear window that allows the non-electronically formatted pubic key to communicate across the boundary of the secure area via the non-electrical communication format including to be viewed and captured by an optical device.

20. A non-transitory computer-readable medium which stores a set of instructions which when executed performs a method for enabling authentication over a communication network comprising:

creating by a first device an authentication certificate including an electronically formatted public key and an electronically formatted private key;

storing by the first device the electronically formatted private key in a memory of the device;

sending by the first device the electronically formatted public key to a certificate authority gateway and converting by the certificate authority gateway the electronically formatted public key into a non-electronically formatted public key;

sending by the certificate authority gateway the non-electronically formatted public key to a certificate authority server and converting by the certificate authority server the non-electronically formatted public key back to the electronically formatted public key and storing by the certificate authority server the electronically formatted public key in a memory of the certificate authority server, wherein the certificate authority server is electrically and physically isolated from the certificate authority gateway via a boundary of a secure area;

signing by the certificate authority server the electronically formatted public key to produce a signed electronically formatted public key and storing by the certificate authority server the signed electronically formatted public key in the memory of the certificate authority server;

retrieving by the certificate authority server the signed electronically formatted public key from the memory of the certificate authority server and converting by the certificate authority server the signed electronically formatted public key to a signed non-electronically formatted public key;

sending by the certificate authority server the signed non-electronically formatted public key to the certificate authority gateway and converting by the certificate authority gateway the signed non-electronically formatted public key back to the signed electronically formatted public key;

sending by the certificate authority gateway the signed electronically formatted public key to a distribution service; and

sending by the distribution service the signed electronically formatted public key to a second device, wherein the second device uses the signed electronically formatted public key in establishing an authenticated communicate link via the communication network with the first device; and

wherein communicating by the certificate authority gateway the non-electronically formatted public key across the boundary of the secure area to the certificate authority server, and communicating by the certificate authority server the signed non-electronically formatted public key across the boundary of the secure area to the certificate authority gateway, said communications via a non-electrical communication format to prevent any electronic attacks on the certificate authority server.