Methods and systems for increasing the security of private keys

1. A method for increasing the security of private keys comprising:

requesting, by a processor, that permission be obtained from a user to use a private key, the private key being associated with the user and being included in a public-private key pair;

generating a biometric template from biometric data captured from the user and authenticating the user based on the generated template after user permission is obtained, the biometric data being determined based on a level of biometric authentication corresponding to the private key, the private key being used for types of transactions matching a transaction desired to be conducted by the user; and

after successfully authenticating the user, applying, by the processor, the private key to data derived from transaction data, the transaction data being for the desired transaction.

2. A method in accordance with claim 1 further comprising conducting the desired transaction with the transaction data.

3. A method in accordance with claim 1 further comprising:

associating a certification of the user with the transaction data;

determining where the private key is located;

generating an identifier for the transaction data; and

preparing the derived data.

4. A method in accordance with claim 1 further comprising:

transmitting the derived data to a computer; and

conducting the desired transaction using the computer.

5. A method in accordance with claim 1 further comprising:

generating an authentication data requirement; and

prompting, using a computer, the user to capture authentication data in accordance with the authentication data requirement when the user is unsuccessfully authenticated.

6. A method in accordance with claim 1 , the transaction data being an e-mail message, the method further comprising:

generating a signed e-mail message and transmitting the signed e-mail message to a device operated by a recipient;

determining whether a certificate included in the received e-mail message is valid; and

determining the trustworthiness of the received e-mail message after the certificate is determined to be valid.

7. A method in accordance with claim 6 , said determining the trustworthiness operation comprising:

determining a hash of the signed e-mail message calculated prior to transmission;

calculating a hash of the received e-mail message;

comparing the hash of the signed e-mail message against the calculated hash; and

determining the e-mail message is trustworthy when the hashes match.

8. A method in accordance with claim 1 further comprising identifying a component of a private key security computer system that stores private keys for a user that are each used for different types of transactions.

9. A computer system for increasing the security of private keys comprising:

a private key computer programmed to store private keys; and

an authentication system programmed to authenticate users and to communicate with said private key computer over a network, wherein:

said private key computer is further programmed to request that permission be obtained from a user to use a private key for the user;

said authentication system is further programmed to generate a biometric template from biometric data captured from the user and authenticate the user based on the generated template after user permission is obtained, the biometric data being determined based on a level of biometric authentication corresponding to the private key, the private key being used for types of transactions matching a transaction desired to be conducted by the user; and

after the user is successfully authenticated, said private key computer is further programmed to apply the private key to data derived from transaction data, the transaction data being for the desired transaction.

10. A computer system in accordance with claim 9 further comprising a client computer programmed to conduct the desired transaction with the transaction data and to communicate with said private key computer and said authentication system over the network.

11. A computer system in accordance with claim 9 further comprising a client computer programmed to:

associate a certification of the user with the transaction data;

determine where the private key is located;

generate an identifier for the transaction data;

prepare the derived data; and

communicate over the network.

12. A computer system in accordance with claim 9 further comprising a client computer programmed to:

receive, over the network, the derived data from said private key computer; and

conduct the desired transaction.

13. A computer system in accordance with claim 9 , said authentication system being further programmed to:

generate an authentication data requirement; and

transmit a message over the network to a client computer for prompting the user to capture authentication data in accordance with the authentication data requirement after the user is unsuccessfully authenticated.

14. A computer system in accordance with claim 9 further comprising a client computer programmed to generate a signed e-mail message and transmit the signed e-mail message over the network to a second client computer, the e-mail message being the transaction data, the second client computer being programmed to determine whether a certificate included in the received e-mail message is valid and determine the trustworthiness of the received e-mail message after the certificate is determined to be valid.

15. A computer system in accordance with claim 14 , said second client computer being programmed to:

determine a hash of the signed e-mail message calculated prior to transmission over the network;

calculate a hash of the received e-mail message;

compare the hash of the signed e-mail message against the calculated hash; and

determine the e-mail message is trustworthy when the hashes match.

16. A computer system in accordance with claim 9 wherein said private key computer categorizes the private keys for each user according to a type of transaction.

17. A non-transitory computer-readable recording medium included in a private key security computer system for enabling increased security of private keys, the computer readable medium being comprised of instructions, which when read and executed by the private key security computer system, cause the private key security computer system to:

determine whether permission has been obtained from the user to use a private key for the user, the private key being the private key included in a public-private key pair of the user;

generate a biometric template from biometric data captured from the user and authenticate the user based on the generated template after user permission is obtained, the biometric data being determined based on a level of biometric authentication corresponding to the private key, the private key being used for types of transactions matching a transaction desired to be conducted by the user; and

after the user is successfully authenticated, apply the private key to data derived from the transaction data, the transaction data being for the desired transaction.

18. A non-transitory computer-readable recording medium in accordance with claim 17 , wherein the instructions when read and executed by the private key security computer system, cause the private key security computer system to categorize the private keys for each user according to a transaction type.