Method for providing cryptographic key pairs
The invention relates to a method for creating a second asymmetric cryptographic pair of keys, wherein a first private key (G 0 ) together with a first public key (O 0 ) forms a first asymmetric cryptographic pair of keys (K 0 ). Embodiments of the method may comprise the following steps: receiving a user identifier; calculating a second private key (G 1 ), wherein a random value (z) and the user identifier are considered in the calculation; calculating a second public key (O 1 ) from the second private key using an asymmetric cryptographic key creation method, wherein the second private key and the second public key form the second asymmetric cryptographic pair of keys (K 1 , 206 ); creating a first cipher (C_G 0 — O 1 ) by encrypting the first private key (G 0 ) with the second public key (O 1 ); and storing the first cipher (C_G 0 — O 1 ).
1. A method for generating a first cipher (C_G 0 — O 1 ) containing a first private key (G 0 ) of a first asymmetric cryptographical key pair (K 0 ), the method comprising:
determining to generate the first cipher (C_G 0 — O 1 ) ;
generating on a computing device a second asymmetric cryptographical key pair (K 1 ) based upon the determining, the second asymmetric cryptographical key pair (K 1 ) comprising a second private key (G 1 ) and a second public key (O 1 );
receiving a third private key (G 2 ), wherein the third private key forms a third asymmetric cryptographical key pair (K 2 )together with a third public key (O 2 );
receiving a second cipher (C_G 0 — O 2 ), wherein the second cipher comprises the first private key (G 0 ) following encryption with the third public key (O 2 );
decrypting the second cipher (C_G 0 — O 2 ) with the third private key (G 2 ) to obtain the first private key (G 0 );
generating the first cipher (C_G 0 — O 1 ) by encrypting the first private key (G 0 ) with the second public key (O 1 ), wherein the generating the first cipher (C_G 0 — O 1 ) comprises encrypting the first private key (G 0 ) obtained by decrypting the second cipher (C_G 0 — O 2 )and
storing the first cipher (C_G 0 — O 1 ).
2. The method of claim 1 , wherein the generating the second asymmetric cryptographical key pair (K 1 ) comprises:
receiving a user input, and
generating the second asymmetric cryptographical key pair (K 1 ) based upon the user input.
3. The method of claim 2 , wherein:
the user input comprises a user identifier;
the generating the second asymmetric cryptographical key pair (K 1 ) comprises:
calculating the second private key (G 1 ) based upon a random value (z) and the user identifier; and
calculating the second public key (O 1 ) from the second private key using an asymmetric cryptographical key generation method; and
the method further comprises storing the random value (z) in a data base.
4. The method of claim 3 , further comprising:
receiving the user identifier, the first cipher (C_G 0 — O 1 ), and the random value (z);
calculating the second private key (G 1 ) based upon the random value (z) and the user identifier;
decrypting the first cipher (C_G 0 — O 1 ) with the second private key (G 1 ) to obtain the first private key (G 0 ); and
decrypting data with the first private key (G 0 ).
5. The method of claim 4 , wherein:
the first private key (G 0 ) is stored on a tangible portable data storage medium; and
the first private key (G 0 ) is obtained from the first cipher (C_G 0 — O 1 ) without accessing the tangible portable data storage medium.
6. The method of claim 1 , wherein:
the first private key (G 0 ) is stored on a tangible portable data storage medium of a first user; and
the method further comprises storing the second asymmetric cryptographical key pair (K 1 ) on a computing device of a second user.