公开(公告)号：US20160127353A1

公开(公告)日：2016-05-05

申请号：US14528762

申请日：2014-10-30

Applicant: MOTOROLA SOLUTIONS, INC.

Inventor： SHANTHI E. THOMAS ,  ANTHONY R. METKE ,  MARK D. SEABORN

IPC: H04L29/06

CPC classification number: H04L63/0823 ,  H04L9/006 ,  H04L9/3268 ,  H04L63/06

Abstract: In a method a public key infrastructure (PKI) device receives a certificate signing request (CSR) and an identity assertion cryptographically bound to an end entity issuing the CSR. The PKI device validates the authenticity and integrity of the CSR using the identity assertion. In response to validating the authenticity and integrity of the CSR, the PKI device issues a certificate based on at least one of the CSR and fields in the identity assertion.

Abstract translation: 在公钥基础设施（PKI）设备的方法中，接收证书签发请求（CSR）以及加密地绑定到发布CSR的终端实体的身份断言。 PKI设备使用身份断言验证CSR的真实性和完整性。 响应验证CSR的真实性和完整性，PKI设备基于身份断言中的至少一个CSR和字段发布证书。

公开(公告)号：US20150134953A1

公开(公告)日：2015-05-14

申请号：US14075624

申请日：2013-11-08

Applicant: MOTOROLA SOLUTIONS, INC

Inventor： MARK D. SEABORN ,  ANTHONY R. METKE

IPC: H04L29/06 ,  H04L9/08

CPC classification number: H04L63/08 ,  G06F21/57 ,  G06F21/602 ,  G06F2221/2153 ,  H04L9/0861 ,  H04L63/0428 ,  H04L63/0823

Abstract: A HSM service controller receives an administrative request to enable a cloud-based application to have access to a cloud-based HSM service. The HSM service controller segments a cloud-based HSM into a plurality of VHSMs. The HSM service controller allocates to the cloud-based application, a source VHSM from among the plurality of VHSMs. The source VHSM includes an initial set of credentials, roles and/or metadata. The HSM service controller stores a handle for the source VHSM in association with a handle for the cloud-based application. The HSM service controller routes cryptography requests between the cloud-based application and the VHSM based on the handle for the source VHSM and the handle for the cloud-based application. The HSM service controller receives one or more management requests from the cloud-based application and executes cloud administrator functions responsive to the management request.

Abstract translation: HSM服务控制器接收管理请求，使基于云的应用程序能够访问基于云的HSM服务。 HSM服务控制器将基于云的HSM分为多个VHSM。 HSM服务控制器分配给基于云的应用程序，来自多个VHSM之间的源VHSM。 源VHSM包括一组初始凭证，角色和/或元数据。 HSM服务控制器为源VHSM存储与基于云的应用程序的句柄相关联的句柄。 HSM服务控制器在基于云的应用程序和VHSM之间基于源VHSM的处理和基于云的应用程序的句柄来路由加密请求。 HSM服务控制器从基于云的应用程序接收一个或多个管理请求，并根据管理请求执行云管理员功能。