Management of secret data items used for server authentication

Abstract

A security device () is provided for facilitating management of secret data items such as cryptographic keys which are used by a remote server () to authenticate operations of the server (). The device () has a user interface (), control logic () and a computer interface () for connecting the device () to a local user computer () for communication with the remote server () via a data communications network (). The control logic is adapted to establish via the user computer () a mutually-authenticated connection for encrypted end-to-end communications between the device () and server (). In a backup operation, the secret data items are received from the server () via this connection. The control logic interacts with the user via the user interface () to obtain user authorization to backup secret data items and, in response, stores the secret data items in memory (). To restore secret data items to the server, the control logic interacts with the user via the user interface () to obtain user authorization to restore secret data items and, in response, sends the secret data items to the server () via said connection.