Method and apparatus for updating web certificates

• US 7,594,107 B1
• Filed: 12/20/1999
• Issued: 09/22/2009
• Est. Priority Date: 12/20/1999
• Status: Expired due to Fees

• Current Assignee: Entrust Corp.
• Original Assignee: Entrust Incorporated (Entrust Corp.)
• Inventors: Parkhill, Robert Everett
• Primary Examiner(s): Bullock, Jr., Lewis A
• Assistant Examiner(s): MITCHELL, JASON D
• Application Number:
  US09/466,650
• Time in Patent Office: 3,564 Days
• Field of Search: 717168-173, 713/156, 713/176, 709/203, 709/217
• US Class Current: 713/156
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A method and system for updating data, such as web certificates, software applications, or other data, detects a need to update data based on a communication between a first processing entity, such as a computer with a web browser, and another processing entity, such as a web server. The web server detects the need to update data and automatically redirects communication from the first processing entity and the second processing entity, so that the first processing entity communicates with a third processing entity. The third processing entity provides updated data, such as a new version of a web browser or other software application, and also provides update complete data indicating that the software, web browser or other data has been updated. The update complete data is provided for the second processing entity so that the second processing entity will suitably perform the process requested by the first processing entity.

Claims

1. A computer executed method for updating data for a first digital processing entity, for detection by at least a second digital processing entity comprising:

detecting a need to update root certification authority (CA) certificate data for the first digital processing entity, based on a communication with the second digital processing entity;

automatically redirecting communication from the first digital processing entity and the second digital processing entity, to the first processing entity and a third digital processing entity, under control of the second digital processing entity, in response to detecting the need to update the root CA certificate data;

providing updated root CA certificate data for the first processing entity, by the third processing entity; and

providing update complete data which is different from the updated root CA certificate data, under control of the third processing entity, for the second processing entity; and

providing update confirmation data from the first processing entity to the third processing entity,

wherein providing update complete data includes providing the update complete data for the second processing entity, by way of the first processing entity; and

wherein automatically redirecting communication from the first processing entity further includes sending, by the second processing entity, a uniform resource locator of the third processing entity, to the first processing entity in response to the second processing entity detecting the need to update data for the first processing entity.

2. The method of claim 1 wherein providing update complete data includes providing the update complete data to the second processing entity.

3. The method of claim 1 wherein detecting a need to update data includes determining whether a connection request between the first processing entity and the second processing entity includes a cookie associated with the second processing entity.

4. The method of claim 1 wherein the data includes certificate data and wherein the method also includes determining whether a certificate update should occur for the first processing entity based on whether cookies have been received by the first processing entity from the second and third processing entities.

5. The method of claim 1 further including automatically redirecting communication from the first processing entity and the third processing entity to the first processing entity and the second processing entity based on update confirmation data.

6. The method of claim 1 including:

sending, by the third processing entity, update instructions to the first processing entity and a request for confirmation of completion of an update;

sending, by the first processing entity, update confirmation data to the third processing entity in response to receiving the request for confirmation of completion of an update.

7. The method of claim 1 wherein the method further includes sending, in response to the update complete data, a cookie from the second processing entity to the first processing entity to confirm acceptance of the update.

8. A computer executed method for updating data for a first digital processing entity, for detection by at least a second digital processing entity comprising:

receiving an automatically redirected communication from the first digital processing entity and the second digital processing entity, redirected to the first digital processing entity and a third digital processing entity, under control of the second processing entity, in response to a detection of a need to update root certification authority (CA) certificate data for the first digital processing entity;

providing update complete data, under control of the third digital processing entity, for the second digital processing entity;

sending, by the third digital processing entity, update instructions to the first digital processing entity and a request for confirmation of completion of an update; and

sending, by the first digital processing entity, update confirmation data to the third digital processing entity in response to receiving the request for confirmation of completion of an update.

9. A computer implemented method for updating certificates for use by a web browser comprising:

detecting a need to update web certificate data for the web browser, based on a communication with a web server;

automatically redirecting communication from the web browser and the web server, to the web browser and a processing entity, under control of the web server, in response to detecting the need to update the web certificate data, by the web server sending a universal resource locator associated with the processing entity to the web browser;

providing web certificate update complete data which is different from updated web certificate data, under control of the processing entity, for the web server; and

determining whether a certificate update should occur for the web browser based on whether cookies have been received by the web browser from the web server and processing entity.

10. The method of claim 9 including providing web certificate update confirmation data from the web browser to the processing entity.

11. The method of claim 9 wherein providing web certificate update complete data includes providing the certificate update complete data for the web server, by way of the web browser.

12. The method of claim 9 including determining whether a certificate update should occur for the web browser based on whether cookies have been received by the web browser from the web server and third processing entity.

13. The method of claim 9 including:

sending, by the processing entity, update instructions to the web browser and a request for confirmation of completion of an update;

sending, by the web browser, update confirmation data to the processing entity in response to receiving the request for confirmation of completion of an update.

14. The method of claim 9 wherein providing web certificate update complete data under control of the processing entity includes sending a redirect command back to the web browser, by the processing entity, to direct the update complete data to the web server, and wherein the method further includes sending, in response to the update complete data to be sent by the first processing entity, a cookie from the web server to the web browser to confirm acceptance of the web certificate update.

18. The method of claim 9 including providing updated web certificate data for the web browser by the processing entity in response to the redirected communication.

15. A web certificate system comprising:

a first device comprising a web browser operative to request a connection with a second device comprising a web server;

the web server, operative to detect a need to update web certificate data based on the request for connection from the web browser wherein the web server automatically redirects communication from the web browser and the web server, to the web browser and a third device comprising a web certificate update controller in response to detecting the need to update the web certificate data, by the web server sending a universal resource locator associated with the web certificate update controller;

the web certificate update controller, in operative communication with the web browser, that provides web certificate update complete data for the web server wherein the web certificate update controller provides updated web certificate data for the web browser in response to the redirected communication; and

wherein the web server determines whether a certificate update should occur for the web browser based on whether cookies have been received by the web browser from the web server and the software update controller.

16. The system of claim 15 wherein the first device comprising the web browser provides web certificate update confirmation data to the web certificate update controller.

17. The system of claim 15 wherein the third device comprising the web certificate update controller provides web certificate update complete data by way of the web browser.