Certificate lookup and validation

• US 7,664,948 B2
• Filed: 05/10/2005
• Issued: 02/16/2010
• Est. Priority Date: 05/21/2004
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: BEA Systems Incorporated (Oracle Corporation)
• Inventors: Moreau, Thomas O.
• Primary Examiner(s): PEESO, THOMAS R
• Application Number:
  US11/125,576
• Publication Number:
  US 20050262345A1
• Time in Patent Office: 1,743 Days
• Field of Search: 713/156, 713/193
• US Class Current: 713/156
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A certificate validation framework allows for the use of plug-ins for a certificate path builder and certificate path validator. Clients can include a web server clients, SSL certificate validation or application code.

Claims

1. A certificate validation framework having a client software interface for client software requesting security certificate look-up or validation through the certificate validation framework, the framework interacting with a plug-in to do security certificate look-up or validation through a plug-in interface, the certificate validation framework having access to stored plug-in specific configuration data, the certificate validation framework providing information from the client software interface and stored configuration information to the plug-in across the plug-in interface,

wherein the plug-in is a certificate path builder plug-in.

2. The certificate validation framework of claim 1, wherein the plug-in is a certificate path builder plug-in.

3. The certificate validation framework of claim 2, further comprising a certificate path validator plug-in.

4. The certificate validation framework of claim 1, wherein the client software is a web service client certificate validation.

5. The certificate validation framework of claim 1, wherein the stored plug in specific configuration data is stored in a configuration data file for a sewer product.

6. A certificate validation framework having a client software interface for client software requesting security certificate look-up or validation through the certificate validation framework, the framework interacting with a plug-in to do security certificate look-up or validation through a plug-in interface, the certificate validation framework having access to stored plug-in specific configuration data, the certificate validation framework providing information from the client software interface and stored configuration information to the plug-in across the plug-in interface, wherein the plug-in is a certificate path validator plug-in.

7. A method comprising:

receiving a security certificate look-up or validation request from client software across a client software interface to a certificate validation framework, the certificate validation framework having access to stored plug-in specific configuration data; and

using the framework to provide information from the client software interface and stored configuration information to a plug-in across a plug-in interface so as to interact with the plug-in to do security certificate look-up or validation;

wherein the plug-in is a certificate path builder plug-in.

8. The method of claim 7, wherein the stored plug-in specific configuration data includes server location information.

9. The method of claim 7, wherein the client software is a web service client certificate validation.

16. The method of claim 7, further comprising a certificate path validator plug-in.

10. A method comprising:

receiving a security certificate look-up or validation request from client software across a client software interface to a certificate validation framework, the certificate validation framework having access to stored plug-in specific configuration data; and

using the framework to provide information from the client software interface and stored configuration information to a plug-in across a plug-in interface so as to interact with the plug-in to do security certificate look-up or validation;

wherein the plug-in is a certificate path validator plug-in.

11. A machine readable medium having instructions stored thereon that when executed by a processor cause a system to:

receive a security certificate look-up or validation request from client software across a client software interface to a certificate validation framework, the certificate validation framework having access to stored plug-in specific configuration data; and

use the framework to provide information from the client software interface and stored configuration information to a plug-in across a plug-in interface so as to interact with the plug-in to do security certificate look-up or validation;

wherein the plug-in is a certificate path builder plug-in.

12. The machine readable medium of claim 11, wherein the stored plug-in specific configuration data includes server location information.

13. The machine readable medium of claim 11, wherein the client software is a web service client certificate validation.

14. The machine readable medium of claim 11, wherein the stored plug-in specific configuration data is stored in a configuration data file for a server product.

17. The machine readable medium of claim 11, further comprising a certificate path validate or plug-in.

15. A machine readable medium having instructions stored thereon that when executed by a processor cause a system to:

receive a security certificate look-up or validation request from client software across a client software interface to a certificate validation framework, the certificate validation framework having access to stored plug-in specific configuration data; and

use the framework to provide information from the client software interface and stored configuration information to a plug-in across a plug-in interface so as to interact with the plug-in to do security certificate look-up or validation;

wherein the plug-in is a certificate path validator plug-in.