METHODS AND SYSTEMS FOR AUTOMATED AUTHENTICATION, PROCESSING AND ISSUANCE OF DIGITAL CERTIFICATES

• US 20090133118A1
• Filed: 11/14/2008
• Published: 05/21/2009
• Est. Priority Date: 10/12/2001
• Status: Active Grant

• Current Assignee: DigiCert Incorporated
• Original Assignee: VeriSign, Inc.
• Inventors: Creighton, Neal Lewis JR., Bailey, Christopher T.M., Beattie, Douglas D., Remy, David L., Hamandi, Hani
• Granted Patent: US 8,028,162 B2
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A computer system and process for issuing digital certificates use domain-control vetting to issue certificates. A requestor requests a certificate from a certificate authority, which identifies at least one approver to approve issuance of the digital certificate. If approved, the certificate authority accepts the request, creates and signs the certificate, and the signed certificate is sent to the requester.

Claims

1-14. -14. (canceled)

15. A method comprising:

receiving, from a requester, a certificate signing request (CSR) for a digital certificate;

requesting from the requestor an approver e-mail address;

receiving from the requester an approver e-mail address;

determining if the approver e-mail address is of the form title@domain_name, where “

domain_name”

is a domain name of an entity for which the digital certificate is requested, and “

title”

is a name selected from a group of titles consisting of “

admin”

, “

administrator”

, “

support”

, “

webmaster”

, hostmaster”

, “

info”

, “

ssladmin”

, and “

sysadmin”

; and

providing certificate information to the approver at the approver e-mail address if the address has the said form.

16. The method of claim 15, wherein the requestor is a web server administrator, the method further including automatically vetting the web server name, including accessing information from a registrar database.

17. The method of claim 15, wherein the CSR is for a website, the method further comprises automatically vetting the web site where the digital certificate is to be used.

18. The method of claim 15, further comprising receiving payment information from the requestor.

19. The method of claim 18, wherein the payment information includes credit card information.

20. The method of claim 18, further comprising comparing the payment information provided by the requestor to information in the CSR.

21. A server for performing the process of claim 15.

22. A computer readable medium having a program for performing the process of claim 15.