Methods and systems for automated authentication, processing and issuance of digital certificates

• US 20030126431A1
• Filed: 10/15/2002
• Published: 07/03/2003
• Est. Priority Date: 10/12/2001
• Status: Active Grant

• Current Assignee: DigiCert Incorporated
• Original Assignee: GeoTrust, Inc. (VeriSign, Inc.)
• Inventors: Beattie, Douglas D., Remy, David L., Bailey, Christopher T. M., Creighton, Neal Lewis Jr., Hamandi, Hani
• Granted Patent: US 7,003,661 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A computer system and process for automated identification, processing and issuance of digital certificates, wherein web server domain-control vetting is employed in issuance of web server certificates. A Requestor requests a web server certificate from a certificate authority, the certificate authority receives the request. Based on domain information the certificate authority generates Approver email addresses, and the Requestor is required to select an Approver email address or addresses. The certificate authority contacts the Approver using the selected email address or addresses and requests that the Approver approve issuance of the certificate. If approved, the certificate authority accepts the request, and creates and signs the certificate and the signed certificate is sent to the Requestor.

Claims

1. A computer system for automated identification, processing and issuance of digital web server certificates, wherein domain-control vetting is employed in the identification and authorization of a Requestor.

2. A computer system according to claim 1, which functions in accordance with FIG. 2.

3. A computer system according to claim 1, which functions in accordance with FIG. 26.

4. A computer system according to claim 1, which functions in accordance with FIG. 27.

5. A computer system according to claim 1, which functions in accordance with FIGS. 3a to 14b.

6. A computer system according to claim 1, which functions in accordance with FIGS. 15a to 25.

7. A computer system for automated identification, processing and issuance of digital certificates comprising:

a. means for a Requestor to request a web server certificate from a certificate authority;

b. means for the certificate authority to receive the request;

c. means for the certificate authority to obtain domain information for a domain for which the certificate is being requested;

d. means for generating Approver email addresses from the domain information;

e. means for the Requestor to select Approver email address or addresses;

f. means for the certificate authority to contact the Approver using the selected email address or addresses and requesting that the Approver approve issuance of the certificate;

g. means for the Approver to deny or approve the request for issuance of the certificate and inform the certificate authority of its denial or approval;

h. means for the certificate authority to create and sign the certificate;

i. means for sending the signed certificate to the Requestor.

8. A computerized process for automated identification, processing and issuance of digital certificates, comprising the steps of:

a. a Requestor requests a web server certificate from a certificate authority;

b. the certificate authority receives the request;

c. the certificate authority obtains domain information for the web server;

d. the certificate authority generates Approver email addresses from the domain information;

e. the Requestor is requested to select Approver email address or addresses;

f. the certificate authority contacts the Approver using the selected email address or addresses and requests that the Approver approve issuance of the certificate;

g. the certificate authority denies the request if not approved or for any other reason;

h. the certificate authority accepts the request if approved, and creates and signs the certificate;

i. the signed certificate is sent to the Requestor.

9. A computerized process for automated identification, processing and issuance of digital certificates, wherein web server domain-control vetting is employed to automatically generate a plurality of mandatory web server Approver email addresses for selection by the certificate Requestor.

10. A computer process according to claim 9, wherein the mandatory web server Approver email addresses are determined in accordance with the process shown in FIG. 2.

11. A computer process according to claim 9, wherein the mandatory web server Approver email addresses are determined in accordance with the process shown in FIG. 26.

12. A computer process according to claim 9, wherein the mandatory web server Approver email addresses are determined in accordance with the process shown in FIG. 27.

13. A computer process according to claim 9, wherein the mandatory web server Approver email addresses are determined in accordance with the process shown in FIGS. 3a to 14b.

14. A computer process according to claim 9, wherein the mandatory web server Approver email addresses are determined in accordance with the process shown in Figures FIGS. 15a to 25.

15. A computer system for automated identification, processing and issuance of digital certificates comprising:

a. means for a Requestor to request a web server certificate from a certificate authority;

b. means for the certificate authority to receive the request;

c. means for generating Approver email addresses by pre-appending a mail box name to the 2, 3, 4, . . . N component domain of the certificate being requested;

d. means for the Requestor to select Approver email address or addresses;

e. means for the certificate authority to contact the Approver using the selected email address or addresses and requesting that the Approver approve issuance of the certificate;

f. means for the certificate authority to deny the request;

g. means for the certificate authority to accept the request, create and sign the certificate;

h. means for sending the signed certificate to the Requestor.