How to transfer the direct proof private key device using an online service

摘要

To transfer the direct proof secret key to the device which is introduced into the client computer system which is in operation on site achieving safely without needing the big non-volatile storage inside the device, it is possible. Specific false random value is formed when producing, is housed in the device. Making use of the false random value, the symmetrical key in order to encode the data structure which keeps the direct proof secret key and the secret key digest which in that device relation are attached is formed. Is formed as the result the data structure which is encoded is housed on the accessible suffering protective online server by the client computer system. The device being the client computer system, when being initialized, you inspect whether or not the data structure which localized does the system and, is encoded exists inside the system. When it does not exist, the system, from the suffering protective online server, is related procures the data structure which is encoded making use of safe protocol. The data structure which is encoded that making use of the symmetrical key which is done again to form from the false random value which is housed, code you decipher that device, procure the direct proof secret key. When the secret key is effective, as for that key, it is possible to be used for succeeding certification processing, by the device inside the client computer system.