Methods and systems for automated authentication, processing and issuance of digital certificates

• US 7,562,212 B2
• Filed: 08/29/2005
• Issued: 07/14/2009
• Est. Priority Date: 10/12/2001
• Status: Expired due to Term

• Current Assignee: DigiCert Incorporated
• Original Assignee: GeoTrust, Inc. (VeriSign, Inc.)
• Inventors: Beattie, Douglas D., Remy, David L., Bailey, Christopher T. M., Creighton, Neal Lewis Jr., Hamandi, Hani
• Primary Examiner(s): Nalven; Andrew L
• Assistant Examiner(s): Lipman; Jacob
• Application Number:
  US11/214,999
• Publication Number:
  US 20060053483A1
• Time in Patent Office: 1,415 Days
• Field of Search: 713/156, 713/157
• US Class Current: 713/156
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A computer system and process for issuing digital certificates use domain-control vetting to issue certificates. A requestor requests a certificate from a certificate authority, which identifies at least one approver to approve issuance of the digital certificate. If approved, the certificate authority accepts the request, creates and signs the certificate, and the signed certificate is sent to the requester.

Claims

1. A method for issuance of a digital credential by a certificate authority, the method comprising:

receiving, by the certificate authority, a request for a digital credential from a requestor, wherein the digital credential is for an internet site with a domain name;

subsequent to the receiving, identifying at least one approver to approve issuance of the digital credential, wherein the identifying the at least one approver includes obtaining contact information for the at least one approver from a third entity, and wherein the at least one approver is associated with the internet site;

contacting an identified approver using the contact information to obtain approval for issuance of the digital credential to the requestor;

receiving a response from the approver; and

issuing a digital credential upon receipt of approval from the approver.

2. The method of claim 1, wherein the submitting includes submitting a certificate signing request (CSR).

3. The method of claim 1, wherein the requestor is a hosting company that makes a request to obtain a digital certificate for a web site registrant.

4. The method of claim 1 wherein the third entity is the WhoIs system.

5. The method of claim 1, wherein obtaining the contact information includes transmitting the domain name to the third entity and receiving the contact information.

6. The method of claim 5, wherein the contact information includes one or more e-mail addresses.

7. The method according to claim 1, wherein the processes of the certificate authority are performed by a microprocessor and in an automated manner.

8. The method according to claim 1, wherein the third entity is a data registrar, and further comprising the certificate authority obtaining information about the requestor from the data registrar.

9. The method according to claim 8, wherein the process of the certificate authority obtaining information about the requestor from the data registrar is automated.

10. The method according to claim 8, wherein the information about the requestor obtained from the data registrar is used by the certificate authority to identify the at least one approver.

11. The method according to claim 1, wherein the identifying of the at least one approver includes generating a list of one or more approvers, and further comprising:

providing the list to the requestor; and

the requestor selecting an approver for the certificate authority to contact from the approver list.

12. The method according to claim 11, wherein the list includes contact information for each approver, including an e-mail address.

13. The method according to claim 1, wherein the digital credential is requested for a server.

14. The method according to claim 13, wherein the server is a web server.

15. The method according to claim 13, wherein the credential is a digital certificate.

16. The method of claim 1, wherein the requestor is a web domain name registrant, and the credential is an SSL server certificate.

17. The method of claim 16, wherein the requestor selects an email address for the approver associated with the domain name, wherein the submitting includes submitting a certificate signing request (CSR), and wherein the approver is asked to approve the issuance of a digital certificate with data elements contained in the CSR.

18. A computer readable medium encoded with a plurality of instructions for controlling a computing system to perform a method for issuance of a digital credential by a certificate authority, the instructions comprising:

receiving, by the certificate authority, a request for a digital credential from a requestor, wherein the digital credential is for an internet site with a domain name;

subsequent to the receiving, identifying at least one approver to approve issuance of the digital credential, wherein the identifying the at least one approver includes obtaining contact information for the at least one approver from a third entity, and wherein the at least one approver is associated with the internet site;

contacting an identified approver using the contact information to obtain approval for issuance of the digital credential to the requestor;

receiving a response from the approver; and

issuing a digital credential upon receipt of approval from the approver.

19. The computer readable medium of claim 18, wherein the third entity is the WhoIs system.

20. The computer readable medium of claim 18, wherein the identifying of the at least one approver includes generating a list of one or more approvers, and further comprising:

providing the list to the requestor; and

the requestor selecting an approver for the certificate authority to contact from the approver list.

21. The computer readable medium of claim 20, wherein the list includes contact information for each approver, including an e-mail address.

22. The computer readable medium of claim 18, wherein obtaining the contact information includes transmitting the domain name to the third entity and receiving the contact information.

23. The computer readable medium of claim 22, wherein the contact information includes one or more e-mail addresses.