VPN enrollment protocol gateway

• US 7,100,046 B2
• Filed: 03/15/2004
• Issued: 08/29/2006
• Est. Priority Date: 04/12/2000
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Balaz, Rudolph, Su, Xiaohong, Vogel, Keith R., Heller, Victor W.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US10/801,333
• Publication Number:
  US 20040177246A1
• Time in Patent Office: 897 Days
• Field of Search: 713/150, 713155-158, 713/175, 713/176, 713/181, 713/189, 713/193, 713200-202, 709/200, 709/238
• US Class Current: 713/156
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A virtual private network (VPN) enrollment protocol gateway is described herein. The protocol gateway is implemented as a registration authority that operates as an intermediary between routers and a certificate authority, allowing routers operating in accordance with one protocol to obtain and maintain certificates for a VPN from a certificate authority operating in accordance with another protocol. In accordance with one aspect, the gateway protocol supports various requests from the router, including router enrollment requests, get certificate revocation list request, get certificate requests, get certificate authority certificate requests, and password requests.

Claims

1. One or more computer-readable media having stored thereon a computer program that, when executed by one or more processors of a computing device, causes the one or more processors to perform acts including:

transmitting a request for an enrollment certificate for a virtual private network to a registration authority operating independently of a certificate authority, the enrollment certificate having an extension added to it by the registration authority on behalf of the computing device.

2. One or more computer-readable media as recited in claim 1, wherein the computer program further causes the one or more processors to transmit additional requests regarding maintaining enrollment in the virtual private network to the registration authority.

3. One or more computer-readable media as recited in claim 1, wherein the computing device comprises a router.