摘要： Key distribution is a growing concern for symmetric cryptography and PKI certificate management. Most of the current key-distribution mechanisms assume the use of the Internet and LAN/WAN networks, which are exposed to security hazards and other weaknesses. To overcome them, the use of comprehensive and robust cryptographic mechanisms, such as RSA are proposed. Another solution is the use of PKI/CA, which generates certificates and distributes them directly to the sender and receiver. This paper introduces a strict security approach covering the entire process, from key/certificate generation to the use of the received key by the other party. The approach is based on the following two elements: a. generation of a key/certificate in a highly secured environment provided by Intel-SGX technology. b. Key distribution using undetected high-speed optical camera communication (OCC), based on the rolling shutter effect of modern smart cameras. The Intel SGX processor enables the creation and protection of random keys and supports secure encryption and decoding of information. The key/certificate transfer is done by blinking LED lights in a specific sequence and frequency, following a coding system. The receiver decodes the received blinks to a bit string using a corresponding image processing application. This optical media ensures secure transfer without the ability to quote it. The experiment results show that this method is feasible, efficient, and implementable.