Method of implementing secure access

• US 20040268142A1
• Filed: 06/30/2003
• Published: 12/30/2004
• Est. Priority Date: 06/30/2003
• Status: Active Grant

• Current Assignee: III Holdings 3, LLC
• Original Assignee: Nokia, Inc. (Nokia Corporation)
• Inventors: Karjala, Jari, Palojarvi, Jari
• Granted Patent: US 7,444,508 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A mobile or other device connects to a server via a publicly accessible network such as the Internet. After installation upon the device, a virtual private network (VPN) client connects to the server and downloads a VPN profile. In one embodiment the device creates public/private key pairs and requests enrollment of a digital certificate. In another embodiment a digital certificate and public/private key pairs are provided. The device also receives a digital certificate from the server and verifies the server certificate by requesting the user to supply a portion of a fingerprint for the certificate. The invention further includes an automatic content updating (ACU) client that downloads a user profile for the VPN, requests certificate enrollment, and updates the VPN client and other applications when new content is available. A security service manager (SSM) server includes, or is in communication with, a Web server, multiple databases, an enrollment gateway and an internal certification authority (CA). A VPN policy manager application creates and manages VPN profiles and/or policies and communicates with the SSM server. The SSM server, which may reside on an enterprise intranet, may further communicate with one or more external CAs.

Claims

1. A method for conducting secure communications, comprising:

(a) connecting a user device via a publicly-accessible network to a server;

(b) receiving a certificate;

(c) calculating an identifier of the received certificate and converting it to a character string;

(d) modifying the string by removing at least one random character from the string;

(e) displaying the modified string;

(f) receiving, from a user previously provided with the identifier through a trusted medium, input corresponding to the at least one removed character; and

(g) continuing connection to the server only if the user input matches the at least one removed character.

2. The method of claim 1, further comprising randomly selecting multiple characters for removal.

3. The method of claim 2, wherein the randomly selected characters are replaced with a character indicating the replacement.

4. The method of claim 2, wherein the modified string is displayed with spaces replacing the removed characters.

5. The method of claim 1, wherein the device is a mobile telephone and the at least one removed character is a digit.

6. The method of claim 1, wherein receiving the certificate comprises receiving the certificate from a certification authority.

7. The method of claim 1, wherein the position of the at least one character removed from the string is different during a subsequent connection attempt.

8. The method of claim 1, wherein the at least one removed character is removed based on the capabilities of the user device.

9. The method of claim 1, wherein receiving input corresponding to the at least one removed character comprises receiving input from a user previously provided with the identifier through a one of the mail or a company newsletter.

10. The method of claim 1, wherein the at least one removed character is a digit, and wherein no non-digit characters are removed.

11. The method of claim 1, further comprising:

repeating steps (a) through (g) on each attempt to connect the device to the server.

12. A device for secure communication with a server via a publicly accessible network, comprising:

an interface to a publicly accessible network; and

a processor configured to perform steps comprising;

receiving, via the interface, a certificate from a remotely located server,

calculating an identifier of the received certificate and converting it to a character string,

modifying the string by removing at least one random character from the string,

displaying the modified string,

receiving, from a user of the device previously provided with the identifier through a trusted medium, input corresponding to the at least one removed character, and

continuing connection to the server only if the user input matches the at least one removed character.

13. A machine-readable medium having machine-executable instructions for performing steps comprising:

(a) connecting a user device via a publicly-accessible network to a server;

(b) receiving a certificate;

(c) calculating an identifier of the received certificate and converting it to a character string;

(d) modifying the string by removing at least one random character from the string;

(e) displaying the modified string;

(f) receiving, from a user previously provided with the identifier through a trusted medium, input corresponding to the at least one removed character; and

(g) continuing connection to the server only if the user input matches the at least one removed character.

14. A method for conducting secure communications, comprising:

(a) connecting a user device via a publicly-accessible network to a server;

(b) receiving a certificate;

(c) receiving a modified identifier, the identifier having previously been calculated for the certificate outside of the user device and modified outside of the user device by removal of at least one random character;

(e) displaying the modified identifier;

(f) receiving, from a user previously provided with the identifier through a trusted medium, input corresponding to the at least one removed character; and

(g) continuing connection to the server only if the user input matches the at least one removed character.