VPN enrollment protocol gateway
First Claim
1. A registration authority comprising:
- a protocol converter coupled to receive messages from a router targeting a certificate authority, and to receive messages from the certificate authority targeting the router;
wherein the protocol converter is configured to convert the messages received from the router in accordance with a first protocol and convert the messages received from the router to a second protocol and subsequently communicate the converted messages to the certificate authority; and
wherein the protocol converter is further configured to convert the messages received from the certificate authority in accordance with the second protocol and convert the messages received from the certificate authority to the first protocol and subsequently communicate the converted messages to the router.
1 Assignment
0 Petitions
Accused Products
Abstract
A virtual private network (VPN) enrollment protocol gateway is described herein. The protocol gateway is implemented as a registration authority that operates as an intermediary between routers and a certificate authority, allowing routers operating in accordance with one protocol to obtain and maintain certificates for a VPN from a certificate authority operating in accordance with another protocol. In accordance with one aspect, the gateway protocol supports various requests from the router, including router enrollment requests, get certificate revocation list request, get certificate requests, get certificate authority certificate requests, and password requests.
24 Citations
52 Claims
-
1. A registration authority comprising:
-
a protocol converter coupled to receive messages from a router targeting a certificate authority, and to receive messages from the certificate authority targeting the router;
wherein the protocol converter is configured to convert the messages received from the router in accordance with a first protocol and convert the messages received from the router to a second protocol and subsequently communicate the converted messages to the certificate authority; and
wherein the protocol converter is further configured to convert the messages received from the certificate authority in accordance with the second protocol and convert the messages received from the certificate authority to the first protocol and subsequently communicate the converted messages to the router. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)
-
-
13. One or more computer-readable media having stored thereon a computer program that, when executed by one or more processors of a registration authority, causes the one or more processors to perform acts including:
-
receiving, from a device, a first message in accordance with a first protocol;
generating, based on the first message, a second message in accordance with a second protocol;
sending the second message to a certificate authority;
receiving, from the certificate authority, a third message in response to the second message and in accordance with the second protocol;
generating, based on the third message, a fourth message in accordance with the first protocol; and
sending the fourth message to the device as a response to the first message. - View Dependent Claims (14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30)
-
-
31. A method, implemented in a registration authority, the method comprising:
-
receiving, from a device, a first message in accordance with a first protocol;
generating, based on the first message, a second message in accordance with a second protocol;
sending the second message to a certificate authority;
receiving, from the certificate authority, a third message in response to the second message and in accordance with the second protocol;
generating, based on the third message, a fourth message in accordance with the first protocol; and
sending the fourth message to the device as a response to the first message. - View Dependent Claims (32, 33, 34)
-
-
35. A registration authority comprising:
-
means for receiving, from a device, a first message in accordance with a first protocol;
means for generating, based on the first message, a second message in accordance with a second protocol;
means for sending the second message to a certificate authority;
means for receiving, from the certificate authority, a third message in response to the second message and in accordance with the second protocol;
means for generating, based on the third message, a fourth message in accordance with the first protocol; and
means for sending the fourth message to the device as a response to the first message. - View Dependent Claims (36, 37, 38, 39, 40)
-
-
41. A registration authority comprising:
-
means for receiving messages from a router targeting a certificate authority, and for receiving messages from the certificate authority targeting the router;
means for maintaining a mapping of certificate authority request IDs to hash values of the router requests;
wherein the means for receiving is for converting the messages received from the router in accordance with a first protocol to a second protocol and subsequently communicating the converted messages to the certificate authority; and
wherein the means for receiving is for converting the messages received from the certificate authority in accordance with the second protocol to the first protocol and subsequently communicating the converted messages to the router. - View Dependent Claims (42, 43, 44, 45, 46, 47)
-
-
48. A registration authority comprising:
-
means for receiving, from a device, a first message in accordance with a first protocol, wherein the first message comprises an enrollment message;
means for generating, based on the first message, a second message in accordance with a second protocol;
means for sending the second message to a certificate authority;
means for receiving, from the certificate authority, a third message in response to the second message and in accordance with the second protocol, wherein the third message comprises a certificate authority pending response;
means for generating, based on the third message, a fourth message in accordance with the first protocol;
means for sending the fourth message to the device as a response to the first message; and
means for generating, in response to the certificate authority pending response;
a hash value based on the enrollment message;
a hash table entry mapping a pending response ID, corresponding to the certificate authority pending response, to the hash value; and
a transaction ID table entry mapping the transaction ID, corresponding to the enrollment message, to a pending response ID corresponding to the certificate authority pending response. - View Dependent Claims (49, 50, 51, 52)
-
Specification