System and method for managing cross-certificates copyright notice

• US 20050138388A1
• Filed: 12/19/2003
• Published: 06/23/2005
• Est. Priority Date: 12/19/2003
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Eldridge, Alan, Paganetti, Robert, Kaufman, Charles
• Application Number:
  US10/741,315
• Publication Number:
  US 20050138388A1
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

The invention provides a method for managing cryptographically generated data tokens, the method comprising: decoding a data file to retrieve a first cryptographically generated data token, identifying a second cryptographically generated data token associated with the first data token, and updating the second data token according to a security preference related to a characteristic of the first or the second data token.

Claims

1. A method for managing cryptographically generated data tokens, the method comprising:

decoding a data file to retrieve a first cryptographically generated data token;

identifying a second cryptographically generated data token associated with the first data token; and

updating the second data token according to a security preference related to a characteristic of the first or the second data token.

2. The method of claim 1, wherein decoding a data file comprises decoding an electronic communication.

3. The method of claim 2, wherein decoding an electronic communication comprises decoding an e-mail message.

4. The method of claim 3, wherein decoding an e-mail message comprises decoding an S/MIME encoded e-mail message.

5. The method of claim 1, wherein decoding a data file to retrieve a first data token comprises decoding a data file to retrieve a digital certificate.

6. The method of claim 5, wherein identifying a second cryptographically generated date token comprises identifying a cross-certificate.

7. The method of claim 1, wherein updating the second data token according to a security preference comprises updating the second data token according to a time period related to an expiration date.

8. The method of claim 7, wherein updating the second data token according to a time period relating to an expiration date comprises updating the second data token according to a time period related to the expiration date of the first or second data token.

9. The method of claim 8, wherein updating the second data token comprises changing the expiration date of the second data token.

10. The method of claim 9, comprising changing the expiration date as directed by a user.

11. The method of claim 9, comprising changing the expiration date automatically according to a security profile associated with the second data token.

12. The method of claim 1, wherein updating according to a security preference related to a characteristic comprises updating according to a security preference related to a characteristic from the group consisting of a user identity, a user serial number, an expiration date, an issuance date, and a certificate authority identity.

13. A system for managing cryptographically generated data tokens, the system comprising:

a data file containing a first cryptographically generated data token;

a data store; and

a processor communicatively coupled to the data store;

wherein the processor is programmed to;

decode the data file to retrieve the first cryptographically generated data token;

identify, in the data store, a second cryptographically generated data token associated with the first data token; and

update the second data token according to a security preference related to a characteristic of the first or second data token.

14. The system of claim 13, wherein the data file comprises an electronic communication.

15. The system of claim 14, wherein the electronic communication comprises an e-mail message.

16. The system of claim 15, wherein the e-mail message comprises an S/MIME encoded e-mail message.

17. The system of claim 13, wherein the first data token comprises a digital certificate.

18. The system of claim 17, wherein the second cryptographically generated date token comprises a cross-certificate.

19. The system of claim 13, wherein the security preference comprises a time period related to an expiration date.

20. The system of claim 19, wherein the time period relating to an expiration date comprises a time period related to the expiration date of the first or second data token.

21. The system of claim 20, comprising changing the expiration date of the second data token.

22. The system of claim 21, comprising changing the expiration date as directed by a user.

23. The system of claim 21, comprising changing the expiration date automatically according to a security profile associated with the second data token.

24. The system of claim 13, wherein the security preference is related to a characteristic from the group consisting of a user identity, a user serial number, an expiration date, an issuance date, and a certificate authority identity.

25. A computer usable medium or media storing program code which, when executed on a computerized device, causes the computerized device to execute a method for managing cryptographically generated data tokens, the method comprising:

decoding a data file to retrieve a first cryptographically generated data token;

identifying a second cryptographically generated data token associated with the first data token; and

updating the second data token according to a security preference related to a characteristic of the first or the second data token.

26. The computer usable medium or media of claim 25, wherein decoding a data file comprises decoding an electronic communication.

27. The computer usable medium or media of claim 26, wherein decoding an electronic communication comprises decoding an e-mail message.

28. The computer usable medium or media of claim 27, wherein decoding an e-mail message comprises decoding an S/MIME encoded e-mail message.

29. The computer usable medium or media of claim 25, wherein decoding a data file to retrieve a first data token comprises decoding a data file to retrieve a digital certificate.

30. The computer usable medium or media of claim 29, wherein identifying a second cryptographically generated date token comprises identifying a cross-certificate.

31. The computer usable medium or media of claim 25, wherein updating the second data token according to a security preference comprises updating the second data token according to a time period related to an expiration date.

32. The computer usable medium or media of claim 31, wherein updating the second data token according to a time period relating to an expiration date comprises updating the second data token according to a time period related to the expiration date of the first or second data token.

33. The computer usable medium or media of claim 32, wherein updating the second data token comprises changing the expiration date of the second data token.

34. The computer usable medium or media of claim 33, comprising changing the expiration date as directed by a user.

35. The computer usable medium or media of claim 33, comprising changing the expiration date automatically according to a security profile associated with the second data token.

36. The computer usable medium or media of claim 25, wherein updating according to a security preference related to a characteristic comprises updating according to a security preference related to a characteristic from the group consisting of a user identity, a user serial number, an expiration date, an issuance date, and a certificate authority identity.