Systems, methods and computer program products for selection of date limited information

• US 6,058,484 A
• Filed: 10/09/1997
• Issued: 05/02/2000
• Est. Priority Date: 10/09/1997
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Chapman, Richard Alan, Peters, Mark E., Salmon, Parley Avery
• Primary Examiner(s): Wright, Norman M.
• Application Number:
  US08/947,952
• Time in Patent Office: 936 Days
• Field of Search: 713/202, 709/219, 709/218, 709/217, 709/227, 709/226, 709/225, 380/3, 380/4, 380/23, 380/25
• US Class Current: 726/10
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

Methods, systems and computer program products are provided for selecting from a plurality of items of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date by selecting an item of date limited information if both a beginning and an end of a validity period of the date limited information are sufficiently distant from the first time and date.

Claims

1. A method of selecting from a plurality of items of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, the method comprising the steps of:

determining if both a beginning and an end of a validity period of an item of date limited information are farther from the first time and date than a predefined threshold; and

selecting the item of date limited information if the beginning and end of the validity period of the item of date limited information is farther from the first time and date than the predefined threshold value.

2. A method according to claim 1, further comprising the step of:

dynamically selecting the predefined threshold value for communication.

3. A method according to claim 1, wherein said step of selecting the item of date limited information if the beginning and end of the validity period of the item of date limited information is farther from the first time and date than the predefined threshold value, comprises the step of selecting the item of date limited information if the beginning of the validity period of the item of date limited information is farther from the first time and date than a first predefined threshold value and if the end of the validity period of the item of date limited information is farther from the first time and date than a second predefined threshold value.

4. A method according to claim 1, wherein the plurality of items of date limited information comprise a plurality of certificates and wherein said selecting step selects a certificate.

5. A method according to claim 4, further comprising the step of transmitting the selected certificate to the second data processing system.

6. A method according to claim 4, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said step of selecting comprises the steps of:

determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

selecting a certificate for transmission if said determining step determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value; and

transmitting the selected certificate to the second data processing system.

7. A method of selecting from a plurality of items of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, the method comprising the step of:

selecting an item of date limited information if both the beginning and an end of a validity period of the date limited information are sufficiently distant from the first time and date;

wherein the plurality of items of date limited information comprise a plurality of certificates, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said step of selecting comprises the steps of;

determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

selecting a certificate for transmission if said determining step determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

determining the difference between the date and time of the first processing system and the not before time for the certificate if the difference between the not before time and the not after time of a certificate of the plurality of certificates is less than the predefined threshold value;

scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time if the difference between the not before time and the not after time of each of the certificates of the plurality of certificates is less than the predefined threshold value;

selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates if the difference between the not before time and the not after time of each of the certificates of the plurality of certificates is less than the predefined threshold value; and

transmitting the selected certificate to the second data processing system.

8. A method of selecting from a plurality of items of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, the method comprising the step of:

selecting an item of date limited information if both the beginning and an end of a validity period of the date limited information are sufficiently distant from the first time and date;

wherein the plurality of items of date limited information comprise a plurality of certificates, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said step of selecting comprises the steps of;

determining the difference between the date and time of the first processing system and the not before time for each of the plurality of certificates;

determining the difference between the date and time of the first processing system and the not after time for each of the plurality of certificates;

scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time; and

selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates.

9. A method according to claim 8, wherein said step of selecting a certificate comprises the step of selecting a certificate with the highest probability of validity based upon the score of the certificate.

10. A method according to claim 8, further comprising the steps of:

determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

selecting a certificate for transmission if said determining step determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value; and

wherein said step of determining the difference between the date and time of the first processing system and the not before time for each of the plurality of certificates, said step of determining the difference between the date and time of the first processing system and the not after time for each of the plurality of certificates, said step of scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time and said step of selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates are carried out if said step of determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value determines that none of the certificates of the plurality of certificates are greater than the predefined threshold.

11. A method according to claim 8, wherein said step of scoring comprises the step of assigning as the score of a certificate the lesser of the determined difference between the not before time and the first time and date and the difference between the not after time and the first time and date.

12. A method according to claim 11, wherein said step of selecting a certificate comprises the step of selecting the certificate with the highest score.

13. A system for selecting from a plurality of items of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, comprising:

means for determining the distance between a beginning and an end of a validity period of an item of date limited information and the first time and date; and

means for selecting the item of date limited information if the beginning and end of the validity period of the item of date limited information are farther from the first time and date than a predefined threshold value.

14. A system according to claim 13, further comprising:

means for dynamically selecting the predefined threshold value for a communication.

15. A system according to claim 13, wherein said means for selecting an item of date limited information if the beginning and end of the validity period of the item of date limited information is farther from the first time and date than a predefined threshold value, comprise means for selecting an item of date limited information if the beginning of the validity period of the item of date limited information is farther from the first time and date than a first predefined threshold value and if the end of the validity period of the item of date limited information is farther from the first time and date than a second predefined threshold value.

16. A system according to claim 13, wherein the plurality of items of date limited information comprise a plurality of certificates and wherein said means for selecting selects a certificate.

17. A system according to claim 16, further comprising means for transmitting the selected certificate to the second data processing system.

18. A system according to claim 17, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said means for determining, said means for selecting and said means for transmitting include:

means for determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

means for selecting a certificate for transmission if said means for determining determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value; and

means for transmitting the selected certificate to the second data processing system.

19. A system for selecting from a plurality of items of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, comprising:

means for determining the distance between a beginning and an end of a validity period of an item of date limited information and the first time and date;

means for selecting the item of date limited information if both the beginning and the end of the validity period of the date limited information are sufficiently distant from the first time and date;

wherein the plurality of items of date limited information comprise a plurality of certificates, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said means for determining, said means for selecting and said means for transmitting include;

means for determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

means for selecting a certificate for transmission if said means for determining determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

means for determining the difference between the date and time of the first processing system and the not before time for the certificate if the difference between the not before time and the not after time of a certificate of the plurality of certificates is less than the predefined threshold value;

means for scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time if the difference between the not before time and the not after time of each of the certificates of the plurality of certificates is less than the predefined threshold value;

means for selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates if the difference between the not before time and the not after time of each of the certificates of the plurality of certificates is less than the predefined threshold value; and

means for transmitting the selected certificate to the second data processing system.

20. A system for selecting from a plurality of items of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, comprising:

means for determining the distance between a beginning and an end of a validity period of an item of date limited information and the first time and date;

means for selecting the item of date limited information if both the beginning and the end of the validity period of the date limited information are sufficiently distant from the first time and date;

wherein the plurality of items of date limited information comprise a plurality of certificates, wherein said means for selecting selects a certificate, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said means for determining and said means for selecting include;

means for determining the difference between the date and time of the first processing system and the not before time for each of the plurality of certificates;

means for determining the difference between the date and time of the first processing system and the not after time for each of the plurality of certificates;

means for scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time; and

means for selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates.

21. A system according to claim 20, wherein said means for selecting comprises means for selecting a certificate with the highest probability of validity based upon the score of the certificate.

22. A system according to claim 20, further comprising:

means for determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

means for selecting a certificate for transmission if said determining step determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value; and

control means for controlling said means for determining the difference between the date and time of the first processing system and the not before time for each of the plurality of certificates, said means for determining the difference between the date and time of the first processing system and the not after time for each of the plurality of certificates, said means for scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time and said means for selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates based upon the difference between the not before time and the not after time of each of the certificates of the plurality of certificates.

23. A system according to claim 20, wherein said means for scoring comprises means for assigning as the score of a certificate the lesser of the determined difference between the not before time and the first time and date and the difference between the not after time and the first time and date.

24. A system according to claim 23, wherein said means for selecting comprises means for selecting the certificate with the highest score.

25. A computer program product for selecting from a plurality of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, the computer program product comprising:

a computer-readable storage medium having computer-readable program code means embodied in said medium, said computer-readable program code means comprising;

computer-readable program code means for determining the distance between a beginning and an end of a validity period of an item of date limited information and the first time and date; and

computer-readable program code means for selecting the item of date limited information if the beginning and end of the validity period of the item of date limited information are farther from the first time and date than a predefined threshold value.

26. A computer program product according to claim 25, further comprising:

computer-readable program code means for dynamically selecting the predefined threshold value for a communication.

27. A computer program product according to claim 25, wherein said computer-readable program code means for selecting an item of date limited information if the beginning and end of the validity period of the item of date limited information is farther from the first time and date than a predefined threshold value, comprise computer-readable program code means for selecting an item of date limited information if the beginning of the validity period of the item of date limited information is farther from the first time and date than a first predefined threshold value and if the end of the validity period of the item of date limited information is farther from the first time and date than a second predefined threshold value.

28. A computer program product according to claim 25, wherein the date limited information comprise certificates.

29. A computer program product according to claim 28, further comprising computer-readable program code means for transmitting the selected certificate to the second data processing system.

30. A computer program product according to claim 28, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said computer-readable program code means for determining, said computer-readable program code means for selecting and said computer-readable program code means for transmitting include:

computer-readable program code means for determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

computer-readable program code means for selecting a certificate for transmission if said computer-readable program code means for determining determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value; and

computer-readable program code means for transmitting the selected certificate to the second data processing system.

31. A computer program product for selecting from a plurality of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, the computer program product comprising:

a computer-readable storage medium having computer-readable program code means embodied in said medium, said computer-readable program code means comprising;

computer-readable program code means for determining the distance between a beginning and an end of a validity period of an item of date limited information and the first time and date;

computer-readable program code means for selecting the item of date limited information if both the beginning and the end of the validity period of the date limited information are sufficiently distant from the first time and date;

wherein the date limited information comprise certificates, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said computer-readable program code means for determining, said computer-readable program code means for selecting and said computer-readable program code means for transmitting include;

computer-readable program code means for determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

computer-readable program code means for selecting a certificate for transmission if said computer-readable program code means for determining determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

computer-readable program code means for determining the difference between the date and time of the first processing system and the not before time for the certificate if the difference between the not before time and the not after time of a certificate of the plurality of certificates is less than the predefined threshold value;

computer-readable program code means for scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time if the difference between the not before time and the not after time of each of the certificates of the plurality of certificates is less than the predefined threshold value;

computer-readable program code means for selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates if the difference between the not before time and the not after time of each of the certificates of the plurality of certificates is less than the predefined threshold value; and

computer-readable program code means for transmitting the selected certificate to the second data processing system.

32. A computer program product for selecting from a plurality of date limited information an item of date limited information for transmission from a first data processing system having a first time and date to a second data processing system having a second time and date, the computer program product comprising:

a computer-readable storage medium having computer-readable program code means embodied in said medium, said computer-readable program code means comprising;

computer-readable program code means for determining the distance between a beginning and an end of a validity period of an item of date limited information and the first time and date;

computer-readable program code means for selecting the item of date limited information if both the beginning and the end of the validity period of the date limited information are sufficiently distant from the first time and date;

wherein the date limited information comprise certificates, wherein each of the plurality of certificates has a not before time and a not after time associated with the certificate and wherein said computer-readable program code means for determining and said computer-readable program code means for selecting include;

computer-readable program code means for determining the difference between the date and time of the first processing system and the not before time for each of the plurality of certificates;

computer-readable program code means for determining the difference between the date and time of the first processing system and the not after time for each of the plurality of certificates;

computer-readable program code means for scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time; and

computer-readable program code means for selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates.

33. A computer program product according to claim 32, wherein said computer-readable program code means for selecting a certificate comprises computer-readable program code means for selecting a certificate with the highest probability of validity based upon the score of the certificate.

34. A computer program product according to claim 32, further comprising:

computer-readable program code means for determining if the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value;

computer-readable program code means for selecting a certificate for transmission if said determining step determines that the difference between the not before time and the not after time of a certificate of the plurality of certificates is greater than a predefined threshold value; and

control computer-readable program code means for controlling said computer-readable program code means for determining the difference between the date and time of the first processing system and the not before time for each of the plurality of certificates, said computer-readable program code means for determining the difference between the date and time of the first processing system and the not after time for each of the plurality of certificates, said computer-readable program code means for scoring each of the plurality of certificates based upon the determined difference between the not before time and the not after time and the first date and time and said computer-readable program code means for selecting a certificate from the plurality of certificates for transmission to the second data processing system based upon the scores of each of the plurality of certificates based upon the difference between the not before time and the not after time of each of the certificates of the plurality of certificates.

35. A computer program product according to claim 32, wherein said computer-readable program code means for scoring comprises computer-readable program code means for assigning as the score of a certificate the lesser of the determined difference between the not before time and the first time and date and the difference between the not after time and the first time and date.

36. A computer program product according to claim 35, wherein said computer-readable program code means for selecting comprises computer-readable program code means for selecting the certificate with the highest score.