CQKMS
Key Management Solution (Key Management System)
A key management system that securely generates, stores, and operates keys required for PKI-based digital signatures and encryption.
Core Software for PKI-based E-Bidding Systems
CQKMS is an essential component of the Public Key Infrastructure (PKI).
In electronic bidding systems, an encryption private key and certificate are generated for each bidding notice, and all bidding documents are encrypted and stored using the corresponding certificate.
To ensure that these documents cannot be accessed before the bid opening, the encrypted bidding documents are decrypted using the encryption private key, which is securely stored in CQKMS.
At the time of bid opening, the private key is retrieved to decrypt the documents.
Thus, CQKMS is a core software component responsible for the secure storage and retrieval of encryption private keys required for building PKI-based electronic bidding systems.
CQKMS System Components & Architecture
The CQKMS Master Server is the main server of CQKMS that directly processes private key escrow and retrieval requests sent from applications such as e-bidding servers and encryption authentication servers.
The CQKMS Slave Server is a distributed storage server that works in conjunction with the CQKMS Master Server to store split parts of the escrowed private keys and retrieves them upon administrator approval when needed.
The CQKMS Client SDK is a library providing functions that allow applications to escrow or retrieve encryption private keys to/from the CQKMS Master Server.
CQKMS Admin is a web console providing administrative functions tailored to the roles of Master/Slave servers, supporting features such as escrow/retrieval log search and retrieval approval.
Core technologies of CQKMS built for secure PKI environments.
Secure Private Key Escrow
CQKMS supports secure escrow and management of private keys, which require the highest level of security in a PKI environment.
Secure Key Retrieval
CQKMS enables secure retrieval of escrowed private keys. Retrieval is restricted to authorized users and can be configured to require administrator approval.
Stored Key Management
CQKMS administrators can view metadata of stored private keys (storage timestamp, escrow entity, associated certificate info, etc.) and search the list of key retrieval requests.
Key Retrieval Approval
CQKMS administrators can view key retrieval requests and approve or reject each request. It supports both manual and automatic approval modes.
Robust Data Security
All data (including private keys) transmitted between the CQKMS Client SDK and the CQKMS Master Server is encrypted using the RSA 2048-bit algorithm. It also implements SSL (Secure Socket Layer) to provide double security over networks.
Administrator Notifications
Under manual approval mode, when a key retrieval request is received, notification emails are sent to the registered emails of Master and Slave server administrators. Once approved, a confirmation email is sent to the requester, facilitating a smooth and efficient workflow.
Support Environment
