Entity authentication in a shared hosting computer network environment

• US 20030028762A1
• Filed: 02/08/2002
• Published: 02/06/2003
• Est. Priority Date: 07/31/2001
• Status: Active Grant

• Current Assignee: Clouding Corporation (Marathon Patent Group, Inc.)
• Original Assignee: Versign, Inc.
• Inventors: Cheung, Owen, Trilli, Kevin, Hsiao, Wentsung, Golub, Ben
• Granted Patent: US 7,231,659 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

Apparati, methods, and computer readable media for authenticating an entity (9) in a shared hosting computer network (4) environment. A service provider computer (2) contains a plurality of entity sites (5). Connected to the service provider computer (2), a trusted third party computer (1) is adapted to provide a conglomerated authenticity certification to the service provider computer (2). Coupled to the trusted third party computer (1) is a means (10) for enabling an entity (9) to seek to convert the conglomerated authenticity certification into an individualized authenticity certification covering that entity'"'"'s site (5).

Claims

1. Apparatus for authenticating an entity in a shared hosting computer network environment, said apparatus comprising:

a service provider computer containing a plurality of entity sites;

connected to the service provider computer, a trusted third party computer adapted to provide a conglomerated authenticity certification to the service provider computer; and

coupled to the trusted third party computer, converting means for enabling an entity to seek to convert the conglomerated authenticity certification into an individualized authenticity certification covering that entity'"'"'s site.

2. The apparatus of claim 1, wherein the converting means comprises a plurality of conversion tokens pre-purchased from the trusted third party by the service provider.

3. The apparatus of claim 1, wherein at least one entity'"'"'s site has received an individualized authenticity certification;

at least one client computer is connected to said authenticated entity site over the computer network; and

a seal evidencing the entity site'"'"'s authentication is displayed on the client computer.

4. The apparatus of claim 3, wherein clicking on the seal results in authentication information being displayed on the client computer.

5. The apparatus of claim 1, wherein at least one entity'"'"'s site has received an individualized authenticity certification;

at least one client computer is connected to said authenticated entity site over the computer network; and

the client computer downloads from the trusted third party computer a plug-in module, said plug-in module containing evidence of the individualized authenticity certification.

6. The apparatus of claim 5, wherein activation of the plug-in module results in authentication information being displayed on the client computer.

7. A method by which a trusted third party empowers a service provider to offer to entities having sites hosted on said service provider'"'"'s computer an ability to seek from the trusted third party individualized authenticity certifications covering said entities, sites, said method comprising the steps of:

the trusted third party providing the service provider with a conglomerated authenticity certification; and

the service provider making available to the entities a conversion means by which the entities may seek individualized authenticity certifications from the trusted third party.

8. The method of claim 7, wherein the conversion means comprises a plurality of digital tokens pre-purchased from the trusted third party by the service provider.

9. The method of claim 8, wherein the service provider sends a token, an activation code, and an address of the trusted third party'"'"'s computer to an entity wishing to obtain an individualized authenticity certification.

10. In a computer network in which a service provider computer hosts a plurality of entities, a method by which an entity desiring authentication applies for an individualized authenticity certification from a trusted third party, said method comprising the steps of:

the trusted third party providing a conglomerated authenticity certification to the service provider computer;

the service provider computer making available to the desirous entity an activation tool; and

the desirous entity presenting the activation tool to the trusted third party, thereby petitioning the trusted third party to convert the conglomerated authenticity certification into an individualized authenticity certification.

11. The method of claim 10, wherein the activation tool comprises a digital token that has been pre-purchased from the trusted third party by the service provider.

12. The method of claim 10, wherein the activation tool comprises a digital activation code.

13. The method of claim 10, wherein the activation tool is appended to a URL of a computer associated with the trusted third party.

14. The method of claim 10, wherein the desirous entity presents its domain name to the trusted third party.

15. The method of claim 14, wherein the trusted third party uses the domain name to access a WHOIS database.

16. The method of claim 10, wherein the trusted third party accesses a proof of right database based upon information provided by the desirous entity.

17. The method of claim 16, wherein, when the desirous entity is deemed acceptable according to the proof of right database, the trusted third party issues an individualized authenticity certification to the desirous entity.

18. The method of claim 17, wherein the activation tool is a digital token, and the trusted third party decrements a token counter.

19. The method of claim 17, wherein the individualized authenticity certification is evidenced by a seal.

20. The method of claim 19, wherein a user computer accesses a Website of the authenticated entity, the seal is downloaded onto the user computer, and the seal is displayed on the user computer.

21. The method of claim 20, wherein clicking on the seal on the user computer causes an information page to be displayed on the user computer, said information page containing background information concerning the individualized authenticity certification.

22. The method of claim 17, wherein the individualized authenticity certification is evidenced by a plug-in module.

23. The method of claim 22, wherein a user computer accesses a Website associated with the trusted third party, the plug-in module is downloaded onto the user computer, and a representation of the plug-in module is displayed on the user computer.

24. The method of claim 23, wherein activation of the plug-in module on the user computer causes an information page to be displayed on the user computer, said information page containing background information concerning the individualized authenticity certification.

25. A computer readable medium containing a computer program by which a trusted third party empowers a service provider to offer to entities having sites hosted on said service provider'"'"'s computer an ability to obtain from the trusted third party individualized authenticity certifications covering said entities'"'"' sites, said computer program containing instructions for:

enabling the trusted third party to provide the service provider with a conglomerated authenticity certification; and

enabling the service provider to make available to the entities a conversion means by which the entities may seek individualized authenticity certifications from the trusted third party.

26. A computer readable medium containing a computer program by which an entity having a site hosted on a service provider computer that hosts a plurality of entities'"'"' sites can seek authentication from a trusted third party, said computer program containing instructions for:

enabling the trusted third party to provide a conglomerated authenticity certification to the service provider computer;

enabling the service provider computer to make available to the seeking entity an activation tool; and

enabling the seeking entity to present the activation tool to the trusted third party, thereby petitioning the trusted third party to convert the conglomerated authenticity certification into an individualized authenticity certification.