公开(公告)号：US11522691B2

公开(公告)日：2022-12-06

申请号：US17157843

申请日：2021-01-25

Applicant: salesforce.com, inc.

Inventor： Aaron Johnson ,  Christopher Pylypko ,  William Johnson

IPC: H04L29/06 ,  G06F21/00 ,  H04L9/08 ,  H04L9/32 ,  H04L9/30 ,  G06F9/455

Abstract: Methods, systems, and devices supporting virtual cryptographic key ceremonies are described. A server may receive a plurality of public keys and a plurality of digital signatures comprising data encrypted using a plurality of private keys, where each private key of the plurality of private keys corresponds to a respective public key of the plurality of public keys. The server may generate a quorum token based on the plurality of signatures and the plurality of public keys, where generating the quorum token is based on the plurality of signatures representing at least a threshold number of pools. The server may receive a plurality of encrypted shares associated with respective pools of a plurality of pools, generate a master wrapping key based on generating the quorum token and receiving the plurality of encrypted shares, unwrap a root key using the master wrapping key, and generate a certificate based on the root key.

公开(公告)号：US20220123929A1

公开(公告)日：2022-04-21

申请号：US17157843

申请日：2021-01-25

Applicant: salesforce.com, inc.

Inventor： Aaron Johnson ,  Christopher Pylypko ,  William Johnson

IPC: H04L9/08 ,  H04L9/32 ,  H04L9/30 ,  G06F9/455

Abstract: Methods, systems, and devices supporting virtual cryptographic key ceremonies are described. A server may receive a plurality of public keys and a plurality of digital signatures comprising data encrypted using a plurality of private keys, where each private key of the plurality of private keys corresponds to a respective public key of the plurality of public keys. The server may generate a quorum token based on the plurality of signatures and the plurality of public keys, where generating the quorum token is based on the plurality of signatures representing at least a threshold number of pools. The server may receive a plurality of encrypted shares associated with respective pools of a plurality of pools, generate a master wrapping key based on generating the quorum token and receiving the plurality of encrypted shares, unwrap a root key using the master wrapping key, and generate a certificate based on the root key.