Abstract: A mechanism and method for managing credentials on an electronic device configured with an iOS based operating system. The iOS based device includes a “keychain” configured in device memory. According to an embodiment, the electronic device comprises an application configured to generate a public certificate object in the keychain and a password object in the keychain. The public certificate object is configured to store a public certificate, and the password object is configured to store a private key. The password object further includes a label or thumbprint for associating the private key with the corresponding public certificate. According to an embodiment, the application stores the private key in an encrypted container in the password object to provide an additional layer of security. The application is configured to unlock the encrypted container utilizing a password provided the user. According to a further aspect, the user password is not stored in memory on the device.

Abstract: A mechanism and method for managing credentials on an electronic device and providing encryption and decryption services for the electronic device comprising a mobile communication device, smart phone or other computing device. According to an embodiment the device is configured with an iOS based operating system. The device is configured with a data encryption service application and an associated secure data repository. According to an embodiment, the electronic device is configured to download and/or cache credentials from a credential management system operatively coupled to the device, comprising public-private key pairs in a PKI system. According to an embodiment, the electronic device is configured with or stores a digital verification signature. The data encryption service application is configured to encrypt/decrypt data (e.g. files, documents) and optionally digitally sign the encrypted file.

Abstract: A mechanism and method for managing credentials on an electronic device configured with an iOS based operating system. The iOS based device includes a “keychain” configured in device memory. According to an embodiment, the electronic device comprises an application configured to generate a public certificate object in the keychain and a password object in the keychain. The public certificate object is configured to store a public certificate, and the password object is configured to store a private key. The password object further includes a label or thumbprint for associating the private key with the corresponding public certificate. According to an embodiment, the application stores the private key in an encrypted container in the password object to provide an additional layer of security. The application is configured to unlock the encrypted container utilizing a password provided the user. According to a further aspect, the user password is not stored in memory on the device.

Abstract: A system and method for managing content for secure communications. The system includes an interface for receiving an encrypted message, a decryption module for decrypting the message into a clear text or other readable form and a key recovery module. The key recovery module recovers a key for the user associated with the encrypted message. The decryption module decrypts the message using the recovered key. The decrypted or clear text message is then routed or transferred for further processing or handling. The further processing includes policy enforcement, virus scanning, spam filtering and/or archiving.

Abstract: A system and method for managing content for secure communications. The system includes an interface for receiving an encrypted message, a decryption module for decrypting the message into a clear text or other readable form and a key recovery module. The key recovery module recovers a key for the user associated with the encrypted message. The decryption module decrypts the message using the recovered key. The decrypted or clear text message is then routed or transferred for further processing or handling. The further processing includes policy enforcement, virus scanning, spam filtering and/or archiving.