Untrusted certificate store for secure e-mail

• US 20070143596A1
• Filed: 12/15/2005
• Published: 06/21/2007
• Est. Priority Date: 12/15/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Myers, Andrew, Wray, John
• Application Number:
  US11/304,112
• Publication Number:
  US 20070143596A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

Under the present invention, a method, system, and program product for providing an untrusted certificate store for secure e-mail is provided. The method for providing the untrusted certificate store (UCS) includes obtaining particular information from either an e-mail message or directory that includes either, or both of, an untrusted certificate and an e-mail address and storing it/them in the UCS and then automatically maintaining the information in the UCS.

Claims

1. A method of providing an untrusted certificate store (UCS) for secure e-mail, comprising the steps of:

obtaining information from one selected from the group consisting of an e-mail message and a directory, wherein the information comprises at least one of an untrusted certificate and an e-mail address;

storing the information in an UCS; and

automatically maintaining the information.

2. The method of claim 1, wherein the automatic maintaining step is periodic.

3. The method of claim 1, wherein the e-mail message is selected from the group consisting of:

a message sent to a user and a message generated by a user.

4. The method of claim 1, wherein the automatic maintaining step comprises synchronizing the information with a directory.

5. The method of claim 1, wherein the automatic maintaining step comprises removing at least a portion from the stored information or adding at least a portion to the stored information.

6. The method of claim 1, further comprising:

sending a secure e-mail message employing the information.

7. The method of claim 6, wherein the sending step is done off-line.

8. The method of claim 1, wherein the storing step further comprises storing a history related to the e-mail message.

9. The method of claim 1, wherein the information received further comprises a Certificate Authority (CA) certificate.

10. The method of claim 1, further comprising:

manually initiating a maintenance of the information.

11. A system for providing an untrusted certificate store (UCS) for secure e-mail comprising:

a system for obtaining information from one selected from the group consisting of an e-mail message and a directory, wherein the information comprises at least one of an untrusted certificate and an e-mail address;

a system for storing the information in an UCS; and

a system for automatically maintaining the information.

12. The system of claim 11, wherein the system for automatic maintaining updates on a periodic basis.

13. The system of claim 11, wherein the e-mail message is selected from the group consisting of:

a message sent to a user and a message generated by a user.

14. The system of claim 11, wherein the automatic maintaining system comprises a system for synchronizing the information with a directory.

15. The system of claim 11, wherein the automatic maintaining system further comprises a system for removing at least a portion from the stored information or a system for adding at least a portion to the stored information.

16. The system of claim 11, further comprising:

a system for sending a secure e-mail message employing the information.

17. The system of claim 16, wherein the sending system sends off-line.

18. The system of claim 11, wherein the storing system further comprises a system for storing a history related to the e-mail message.

19. The system of claim 11, wherein the information received further comprises a Certificate Authority (CA) certificate.

20. The system of claim 11, further comprising:

A system for manually initiating a maintenance of the information

21. A program product stored on a computer readable medium for providing an untrusted certificate store (UCS) for secure e-mail, the computer readable medium comprising program code for performing the steps of:

obtaining information from one selected from the group consisting of an e-mail message and a directory, wherein the information comprises at least one of an untrusted certificate and an e-mail address;

storing the information in an UCS; and

automatically maintaining the information.