System and method for implementing digital signature using one time private keys

Abstract

The OTPK moduleis essential to the present embodiment. It may be considered to be a software module implemented on the signing entity. The OTPK modulemay be dynamically downloaded for use or implemented as a pre-installed client plug-in. The OTPK modulemay perform its role without significant intervention from a user when operating as the signing entity. The OTPK modulemay be implemented as a PKCS#11 or CAPI DLL or a Java Applet or ActiveX plugin embedded within the Internet Web Browser. It may be automatically executed when performing secure transactions requiring digital signatures. The OTPK moduleserves to independently and without additional instruction from a user carry out the steps of generating the asymmetric key pairs comprising the public key and the private key. The OTPK modulethen contacts the authentication and certification serverfor authenticating the identity of the signing entity. At this point, the user of the signing entitymay be prompted for a password or the password may have been entered earlier as part of a 2-factor authentication to the authentication and certification server. The private key is then automatically used to generate a digital signature for the signing entity. At this point onwards, the private key is then irretrievably deleted such that it cannot be re-used or copied for future use.