Method and system for restricting access to the private key of a user in a public key infrastructure

DETAILED DESCRIPTION An aspect of one object of the present invention is to provide an improved encryption/decryption system.
In accordance with the aspect of the present invention is provided an encryption/decryption system for providing restricted use of each" key in a plurality of keys to preserve confidentiality of the plurality of keys.
Each key is usable by an associated user in a public key infrastructure to encrypt and decrypt data.
The encryption/decryption system comprises: (a) A key storage means for storing a plurality of key; (b) User authentication means for determining whether a prospective user of a key in a plurality of keys is the associated user of the key; and (c) An encryption/decryption means for encrypting and decrypting data using the plurality of keys when the user authentication means authenticates the prospective user.
The encryption/decryption means is operable in a browser on a client computer.
Preferably, for each key in the plurality of keys a biometric standard determined by measuring a selected feature of the associated user is stored in the key storage means.
Further, the user authentication means comprises means for: (i) Measuring the selecting feature of a prospective user; (ii) Determining if the selected feature measured sufficiently correspond to the biometric standard; (iii) Granting use of the key to the prospective user if the selected feature as measured sufficiently corresponds to the biometric standard; and (iv) Denying use of the key to the prospective user if the selected feature as measured insufficiently corresponds to the biometric standard.
An object of a second aspect of the invention is to provide an improved computer program product for encryption/decryption.
In accordance with this second aspect of the present invention there is provided a computer program product for use on a computer system to provide restricted use of each key in a plurality of keys to preserve confidentiality of the plurality of keys.
Each key is usable by an associated user in a public key infrastructure to encrypt and decrypt data