System and method to use a cloud-based platform supported by an API to authenticate remote users and to provide PKI- and PMI-based distributed locking of content and distributed unlocking of protected content
A security system for authenticating users and protecting content that provides an application program interface (API) with a Cloud Platform integration (Platform) to extend the security capabilities of Public Key Infrastructure and Privilege Management Infrastructure systems to authenticated external users and protected content.
1. A method executed in one or more computing devices, each computing device including a processor and memory to provide one or more applications to integrate security or cryptographic functions, the one or more applications including public key infrastructure, privilege management infrastructure, certification authority, registration authority, attribute authority, or hardware security module, or a combination thereof, the one or more applications being comprised in a platform service, the method comprising:
extending security credentials to a user entity to effectuate a secure communication between the user entity and the one or more computing devices beyond a network firewall of the one or more computing devices, the user entity not having specific knowledge of security or cryptographic functions of the one or more computing devices to access security or cryptographic functions, the user entity accessing, using, or benefiting from capabilities of the platform service through the use of an application programming interface that accesses or utilizes designated capabilities of the platform service;
integrating the platform service with pre-existing security or cryptographic applications of the user entity;
communicating with the platform service using the application programming interface to access, utilize or benefit from the capabilities of the platform service;
inviting one or more remote entities to establish and authenticate a secure communications line with the user entity using an inviter-invitee protocol;
invoking a digital signature generation key pairs and at least one of key establishment key pairs, encryption-decryption key pairs, or digital signature verification;
delivering access through the use of public key pairs applied to symmetric encryption keys used for encrypting content for transmittal to external entities so that content or communications may preferably securely be made available to intended recipients; and
receiving requests at the one or more computing devices, the requests being subsequently processed or translated by the application programming interface into instructions transmitted to the one or more computing devices to generate translated requests that are in a defined format that said platform service can understand and can act upon;
wherein predetermined actions may be implemented via one or more transferred instruction by the platform service; and
wherein the predetermined actions may be communicated from the platform service to the application programming interface and to the user entity with a client software application that connects to the application programming interface.
2. The method of claim 1 such that the platform service supports the user entity located in a cloud computing environment.