Short-duration digital certificate issuance based on long-duration digital certificate validation

    公开(公告)号:US11575522B2

    公开(公告)日:2023-02-07

    申请号:US15836581

    申请日:2017-12-08

    Abstract: A certificate authority service receives a request to issue a long-duration digital certificate from an entity for validation purposes between the entity and the service. Upon issuance of the long-duration digital certificate, the entity submits a request to the service for issuance of a short-duration digital certificate that includes a shorter validity period than the long-duration digital certificate. The service may utilize the long-duration digital certificate to validate the entity and, upon validating the entity, issues the short-duration digital certificate to the entity. The entity may subsequently utilize the short-duration digital certificate to enable a user client to authenticate the entity and securely communicate with the entity.

    VALIDATION FOR REQUESTS
    2.
    发明申请

    公开(公告)号:US20170366538A1

    公开(公告)日:2017-12-21

    申请号:US15674408

    申请日:2017-08-10

    Abstract: A customer can demonstrate control over an element, such as a domain, by receiving a certificate from a certificate authority. The customer can utilize a device for sending a request relating to a specified domain and receiving a request token to be provided to a domain registry associated with the subject domain. Request token creation can entail generating at least one of a random string, a string generated based on information about a customer, a string generated based on information about the application, a password, or a key. After receiving the request token, the domain registry, in turn, will provide the token to the authority, which will verify that the request token received from the domain registry corresponds to the request token originally provided to the customer's device. If the two tokens match, the authority can act in accordance with the request, such as by issuing the certificate.

    Configuration and verification by trusted provider
    3.
    发明授权
    Configuration and verification by trusted provider 有权
    受信任的提供商的配置和验证

    公开(公告)号:US09407505B2

    公开(公告)日:2016-08-02

    申请号:US13784276

    申请日:2013-03-04

    CPC classification number: H04L41/0866 G06F21/57 H04L41/28

    Abstract: A computing resource is loaded with the code or data, and an audited record of the loaded code or data is generated. Furthermore, a configuration integrity is generated based on the record of the loaded code or data. The configuration integrity verifier is sent to a requestor for verification of the code or data, the configuration integrity verifier being usable as a trusted verification of the loaded code or data.

    Abstract translation: 计算资源被加载代码或数据,并且生成加载的代码或数据的审计记录。 此外,基于加载的代码或数据的记录来生成配置完整性。 配置完整性验证器被发送到请求者以验证代码或数据,配置完整性验证器可用作加载的代码或数据的可靠验证。

    Validation for requests
    8.
    发明授权

    公开(公告)号:US09769153B1

    公开(公告)日:2017-09-19

    申请号:US14821477

    申请日:2015-08-07

    Abstract: A customer can demonstrate control over an element, such as a domain, by receiving a certificate from a certificate authority. A customer can submit a request and receive a request token. The customer can generate a cryptographic hash of the request using the token, which a service provider can compare against an expected hash similarly generated. If the hashes match, an action can be taken such as a certificate issued. A customer can request one or more request tokens up front, whereby the tokens can be used to submit hashes with requests at the appropriate time. In some embodiments a customer can submit a request specifying one or more domains, and a service provider can provide a list of confirmatory email addresses from which the customer can select. The service provider can then send a message to that address that include a link for requesting a certificate.

Patent Agency Ranking