What is Hierodiction SKM 2.0?
Hierodiction Secure Key Manager 2.0 offers secure generation, storage and retrieval of cryptographic keys. The SKM Manager comprises of: (a) The SKM Server, implemented as a Web Service; and (b) The SKM Requestor, the client that communicates with the SKM Server. The SKM Requestor includes a set of library functions, invoking the SKM Web service, which may seamlessly integrate with your own .net applications. In addition, the Requestor comes with a powerful cryptographic library that enables your custom applications to have quick and easy access to cryptographic functions; and an easy to use interface (Requestor Client Software) that enables one to create cryptographic key pairs for data encryption.
The SKM Server offers the following services:
(a) RequestKey() generates a cryptographic key pair in the SKM. The public key is communicated to the Requestor, however, the private key remains unknown due to the fact that it is not actually stored anywhere but is quasi “forgotten” by the SKM. The private key can only be reconstructed by an authorized requestor. Even complete control over the SKM Key Server will not enable one to read any private key stored therein.
(b) ActivateKey() reconstructs the private key and retrieves it from the SKM server.
The Verifier (VFY):
An extension to the SKM, which produces a second digital signature on voting rights in addition to the election server. An independent watchdog authority providing additional safeguards in the election process would typically run the Verifier and thus monitor the elections.