Cryptographic services engine
A cryptographic services management engine may provide a single point of interaction for both users and administrators to manage and consume cryptographic services. Such an engine may allow centralized control over cryptography parameters, ensuring enterprise security standards are maintained while abstracting the complexity and potential for error away from users. Automating cryptographic maintenance tasks may avoid outages caused by expired or incorrect certificates, and improve reliability and predictability of critical infrastructure services.
1. A cryptographic services system, that includes:
a computer processor;
at least one interface, configured to translate at least one request for cryptographic services from at least one of at least one user of the system or at least one administrator of the system into at least one service instruction for the computer processor, the at least one administrator administering a provision of at least one cryptographic service to the at least one user, and the at least one cryptographic service comprising generating a report that includes certificate expiration data associated with cryptographic data and a graph indicating a number of expiring certificates over a time range based on the certificate expiration data; and
at least one memory, comprising the cryptographic data and processor executable code to perform the at least one cryptographic service,
wherein the computer processor is configured, in response to the at least one service instruction, to execute the executable code in the at least one memory to perform the at least one cryptographic service using the cryptographic data.
2. The system of claim 1 , wherein the at least one memory includes a first memory and a second memory, the first memory storing the processor executable code to perform the at least one cryptographic service and the second memory storing the cryptographic data.
3. The system of claim 1 , wherein the at least one cryptographic service comprises performing a health check on cryptographic infrastructure that generates a report comprising data on device and interface availability and performance.
4. The system of claim 1 , wherein the at least one cryptographic service comprises scanning a certificate configuration of the cryptographic data to ensure the cryptographic data meets a requirement and revoking a certificate in response to determining the cryptographic data does not meet the requirement.
5. The system of claim 1 , wherein the at least one cryptographic service comprises generating at least one of a random number or at least one encryption key.
6. The system of claim 1 , wherein the at least one cryptographic service comprises generating at least one of a signature or a hash based on an input.
7. A non-transitory, tangible computer-readable medium, storing machine readable instructions that when executed by a processor cause the processor to:
receive at least one cryptographic service instruction from at least one interface in response to at least one request for cryptographic services from at least one of at least one user of a cryptographic services system or at least one administrator of the cryptographic services system, the at least one administrator administering a provision of at least one cryptographic service to the at least one user, and the at least one cryptographic service comprising generating a report that includes certificate expiration data associated with cryptographic data and a graph indicating a number of expiring certificates over a time range based on the certificate expiration data;
retrieve processor executable code and the cryptographic data from at least one memory; and
execute the processor executable code to perform the at least one cryptographic service, corresponding to the at least one cryptographic service instruction, on the cryptographic data.
8. The medium of claim 7 , wherein the machine readable instructions when executed by the processor cause the processor to:
retrieve the processor executable code from a first memory; and
retrieve the cryptographic data from a second memory.
9. The medium of claim 7 , wherein the at least one cryptographic service comprises at least one of scanning a certificate configuration of the cryptographic data to ensure the cryptographic data meets a requirement or revoking a certificate if the cryptographic data does not meet the requirement.
10. The medium of claim 7 , wherein the at least one cryptographic service comprises generating at least one of a random number or at least one encryption key.
11. The medium of claim 7 , wherein the at least one cryptographic service comprises generating at least one of a signature or a hash based on an input.
12. The medium of claim 7 , wherein the at least one cryptographic service comprises logging all user or administrator activity pertaining to the cryptographic data.
13. The medium of claim 7 , wherein the at least one cryptographic service comprises notifying at least one of the at least one user of an impending expiration of a certificate associated with the cryptographic data.
14. A computer implemented method, executed with a computer processor, to perform at least one cryptographic service, comprising:
receiving, with the computer processor, at least one cryptographic service instruction from at least one interface in response to at least one request for cryptographic services from at least one of at least one user of a cryptographic services system or at least one administrator of the cryptographic services system, the at least one administrator administering a provision of at least one cryptographic service to the at least one user, and the at least one cryptographic service comprising generating a report that includes certificate expiration data associated with cryptographic data and a graph indicating a number of expiring certificates over a time range based on the certificate expiration data;
retrieving, with the computer processor, processor executable code and the cryptographic data from at least one memory; and
executing, in the computer processor, the processor executable code to perform the at least one cryptographic service, corresponding to the at least one cryptographic service instruction, on the cryptographic data.
15. The method of claim 14 , wherein retrieving the processor executable code and the cryptographic data from the at least one memory comprises:
retrieving the processor executable code from a first memory; and
retrieving the cryptographic data from a second memory.
16. The method of claim 14 , wherein the at least one cryptographic service comprises performing a health check on cryptographic infrastructure that generates a report comprising data on device and interface availability and performance.
17. The method of claim 14 , wherein the at least one cryptographic service comprises scanning a certificate configuration of the cryptographic data to ensure the cryptographic data meets a requirement and revoking a certificate in response to determining the cryptographic data does not meet the requirement.
18. The method of claim 14 , wherein the at least one cryptographic service comprises generating at least one of a random number or at least one encryption key.
19. The method of claim 14 , wherein the at least one cryptographic service comprises generating at least one of a signature or a hash based on an input.