Confirming receipt of audit records for audited use of a cryptographic key

1. Method for auditing use of an audited cryptographic key, said method comprising the steps of:

defining a set of audited uses for the audited cryptographic key;

using the audited cryptographic key inside a protected execution environment in an instance of an audited use of the audited cryptographic key;

for each instance of an audited use of the audited cryptographic key, releasing a digitally signed audit record describing said instance of use of the audited cryptographic key;

receiving from an auditor a signed receipt of received digitally signed audit records by the auditor;

verifying a digital signature of the signed receipt of the auditor inside the protected execution environment using a public verification key of the auditor;

determining the set of audit records that have not been verified by the auditor;

storing a set of allowable conditions for the set of non-verified audit records; and

preventing the protected execution environment from outputting the results of an instance of an audited use of the audited cryptographic key when the set of non-verified audit records does not meet all of the conditions in said set of allowable conditions.

2. Method of claim 1 , where one of the allowable conditions is that the total number of instances of non-verified audit records is less than some fixed value stored in the protected execution environment.

3. Method of claim 1 , where one of the allowable conditions is that there is no instance of a non-verified audit record for an audit record that is older than some fixed amount of time stored in the protected execution environment.

4. Method of claim 1 , where the auditor can determine whether there is an instance of an audited use of the audited cryptographic key for which the auditor has not received a signed audit record.

5. Method for auditing use of a audited cryptographic key, said method comprising the steps of:

defining a set of audited uses for the audited cryptographic key;

using the audited cryptographic key inside a protected execution environment in an instance of an audited use of the audited cryptographic key;

for each instance of an audited use of the audited cryptographic key, releasing a digitally signed audit record describing said instance of use of the audited cryptographic key;

receiving from an auditor a digitally signed receipt of received audit records by the auditor;

verifying a digital signature of the signed receipt of the auditor inside the protected execution environment using a public verification key of an auditor; and

preventing the protected execution environment from outputting the results of an instance of an audited use of the audited cryptographic key when the protected execution environment has not verified a digital signature of a signed receipt of an audit record for that instance of an audited use of the audited cryptographic key.

6. A computing device comprising:

a protected execution environment in which an application can execute without attack from outside a trusted computing base of the protected execution environment;

an audited cryptographic key held securely in the protected execution environment;

a set of audited uses for the audited cryptographic key;

a digitally signed audit record comprising a multitude of instances of audited uses of the audited cryptographic key;

a public verification key of an auditor contained in the protected execution environment;

a signed receipt of an audit record from the auditor which has been verified by the public verification key of the auditor;

a set of unverified audit records, which have not been verified by the auditor

a set of allowable conditions for the set of audit records that have not been verified by the auditor; and

a blocking module that keeps the protected execution environment from outputting the results of an instance of an audited use of the audited cryptographic key when the set of non-verified audit records does not meet all of the conditions in said set of allowable conditions.

7. Computing device of claim 6 , where one of the allowable conditions is that the total number of instances of non-verified audit records is less than some fixed value stored in the protected execution environment.

8. Computing device of claim 6 , where one of the allowable conditions is that there is no instance of a non-verified audit record that is older than some fixed amount of time stored in the protected execution environment.

9. Computing device of claim 6 , where the auditor can determine whether there is an instance of an audited use of the audited cryptographic key for which the auditor has not received a signed audit record.

10. A computing device comprising:

a protected execution environment in which an application can execute without attack from outside a trusted computing base of the protected execution environment;

an audited cryptographic key held securely in the protected execution environment;

a set of audited uses for the audited cryptographic key;

a digitally signed audit record comprising a multitude of instances of audited uses of the audited cryptographic key;

a public verification key of an auditor contained in the protected execution environment;

a signed receipt from the auditor which has been verified by the public verification key of the auditor and which indicates which instances of audited uses of the audited cryptographic key have been verified by the auditor; and

a blocking mechanism that keeps the protected execution environment from outputting the results of an instance of an audited use of the audited cryptographic key when the protected execution environment has not verified a digital signature of a signed receipt of an audit record for that instance of an audited use of the audited cryptographic key.