Automated issuance of SSL certificates

• US 20060143442A1
• Filed: 12/21/2005
• Published: 06/29/2006
• Est. Priority Date: 12/24/2004
• Status: Abandoned Application

• Current Assignee: Sander A. Smith
• Original Assignee: Sander A. Smith
• Inventors: Smith, Sander A.
• Application Number:
  US11/312,509
• Publication Number:
  US 20060143442A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and process unifies DNS/Naming registration, trusted SSL certificate generation and signing. While installing a product, a customer registers it. This automatically enables the customer to use the DNS/Naming registration service offered by the entity, which automatically assigns a customer specified symbolic name for the product so that it can easily be found on the Internet. This is done simply and inexpensively by piggybacking on one of the domains owned by the entity. Once this happens, a SSL certificate is created and signed based on the subdomain. No verification of the SSL certificate is required, since the subdomain was assigned by the entity and it knows to whom it was assigned.

Claims

1. A system for the automated issuance of a SSL certificate, said system comprising:

a first product operatively connected to a product registration agent;

a certificate provisioning server operatively connected to said product registration agent under control of an entity; and

said certificate provisioning server operatively connected to a certificate authority and a domain name server.

2. The system of claim 1 wherein said certificate provisioning server comprises an administration application, a key server, a registration server, and a naming server.

3. The system of claim 1 further comprising means for providing a subdomain associated with said first product, to permit a client to connect to said first product via said subdomain, said subdomain under the control of said entity.

4. The system of claim 1 further comprising a gateway operatively connected to said first product and a client.

5. The system of claim 1 further comprising means for revoking said SSL certificate if said SSL certificate has been compromised or expired.

6. The system of claim 1 further comprising means to allow a customer to specify an independent domain to permit a client to connect to said first product.

7. The system of claim 1 further comprising a second product acting as a client connected to said first product under the control of said entity.

8. The system of claim 1 wherein said SSL certificate may be a client certificate or a server certificate.

9. The system of claim 1 further comprising a connection server connecting said first product to a client.

10. The system of claim 1 further comprising means for preventing the use of said SSL certificate for e-commerce.

11. The system of claim 1 further comprising means for connecting said first product to a client via a direct connection or a gateway connection.

12. A method for the automated issuance of a SSL certificate, said method comprising the steps of:

installing a first product;

invoking a product registration agent to generate a CSR, the DNS name within said CSR being known to said product registration agent;

forwarding said CSR to a certificate authority for issuance of said SSL certificate; and

returning said SSL certificate to said first product to permit secure communication between said first product and a client.

13. The method of claim 12 further comprising the step of providing a subdomain associated with said first product, to permit said client to connect to said first product via said subdomain, said subdomain under the control of said entity.

14. The method of claim 12 further comprising the step of allowing said client to connect to said first product via a direct connection or a gateway connection.

15. The method of claim 12 further comprising the step of revoking said SSL certificate if said SSL certificate has been compromised or expired.

16. The method of claim 12 further comprising the step of permitting a customer to specify an independent domain to permit a client to connect to said first product.

17. The method of claim 12 further comprising the step of providing a second product acting as a client to connect to said first product under the control of said entity.

18. The method of claim 12 wherein said SSL certificate may be a client certificate or a server certificate.

19. The method of claim 12 further comprising the step of utilizing a connection server to connect said first product with said client.

20. The method of claim 12 further comprising the step of preventing the use of said SSL certificates for e-commerce.

21. A computer readable medium comprising instructions to execute the method of claim 12.