System and method for configuring a valid duration period for a digital certificate

• US 8,301,877 B2
• Filed: 03/10/2008
• Issued: 10/30/2012
• Est. Priority Date: 03/10/2008
• Status: Active Grant

• Current Assignee: SecureAuth Incorporated
• Original Assignee: SecureAuth Incorporated
• Inventors: Grajek, Garret, Lund, Craig, Moore, Steven, Lambiase, Mark
• Primary Examiner(s): Chea, Philip
• Assistant Examiner(s): ALVARADO DAVID, DORIANNE
• Application Number:
  US12/075,219
• Publication Number:
  US 20090228703A1
• Time in Patent Office: 1,695 Days
• Field of Search: 713/156, 713/158
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method and system for configuring a valid duration period for a digital certificate. The method includes assigning a positive numeric value for each certificate term. The positive numeric value assigned to each certificate term is representative of the valid duration period. The method continues by prompting a user of the client device to request one certificate term. The method may include transmitting the requested certificate term to a server. The certificate term requested is sent via a certificate request. The server is configured to convert the positive numeric value associated with the requested certificate term into a duration counter. The method may also include a certificate server receiving from the server, the certificate request including the duration counter. The certificate server is configured to digitally sign the certificate request. The method may conclude with the client device generating the digital certificate having the valid duration period correspond to the positive numeric value associated with the requested certificate term.

Claims

1. A method for configuring a valid duration period for a digital certificate having a certificate term, the method comprising:

assigning a positive numeric value for each certificate term from a plurality of certificate terms, the positive numeric value being representative of the valid duration period;

prompting a user of a client device to request one certificate term from the plurality of certificate terms;

receiving the requested certificate term on a server via a certificate request, the server being configured to convert the positive numeric value associated with the requested certificate term into a duration counter according to a local policy defined on the server separately from the user-requested certificate term,

transmitting the certificate request including the duration counter to a certificate server configured to sign the certificate request in response to receipt thereof; and

transmitting the signed certificate request from the certificate server to the client device, the digital certificate having the valid duration period corresponding to the positive numeric value converted from the user-requested certificate term being generated on the client device based upon the signed certificate request.

2. The method of claim 1, wherein the plurality of certificate terms include a long-term certificate and a short-term certificate.

3. The method of claim 1, wherein the server further comprises a server component, the server component being in communication with the client device.

4. The method of claim 3, wherein the client device further comprises a client component, the client component being configured to prompt a user of the client device to select one certificate term in response to establishing a communication link with the server component.

5. The method of claim 1, wherein the duration counter is a computer understood time unit.

6. The method of claim 3, wherein the server component is accessible by a server administrator for assigning the positive numeric value associated with each certificate term from the plurality of certificate terms.

7. The method of claim 1, wherein the certificate server further comprises a certificate policy component, the certificate policy component being configured to access the duration counter received with the certificate request.

8. The method of claim 7, wherein the certificate policy component is programmed to digitally sign the certificate request with the valid duration period corresponding to the duration counter.

9. The method of claim 4, wherein the client component is transmitted to the client device from the server component.

10. The method of claim 4, wherein the client component is installed on the client device independent of the server component.

11. The method of claim 1, wherein the user does not request the certificate term, the certificate term being selected by default by the server.

12. A method for configuring a valid duration period for a digital certificate, the method comprising:

establishing a communication link between a client device and a server via a web browser;

selecting a certificate term using a client component installed on the client device;

associating a positive numeric value with the certificate term on the server, the server being configured to convert the positive numeric value into a duration counter according to a local policy defined on the server separately from the certificate term;

receiving from the server on the client device via the web browser a signed certificate request generated by a certificate server in response to a certificate request from the server including the converted duration counter; and

generating the digital certificate based upon the received signed certificate request, the valid duration period of the generated digital certificate corresponding to the positive numeric value converted from the certificate term.

13. The method of claim 12, wherein the certificate term is selected from a plurality of certificate terms.

14. The method of claim 12, wherein the duration counter is a computer understood time unit.

15. The method of claim 13, wherein the plurality of certificate terms include a long-term certificate and a short-term certificate.

16. The method of claim 12, wherein the client component is configured to be processed by the client device for automatically selecting the certificate term based upon automated parameters existing on the client device.

17. The method of claim 12, wherein the client component is configured to communicate with an external program including automated parameters for selecting the certificate term.

18. A system for configuring a valid duration period for a digital certificate, the system comprising:

a plurality of certificate terms, each certificate term having a positive numeric value assigned therein, the positive numeric value being representative of a quantity of time;

a server for storing the plurality of certificate terms, the server being configured to convert the positive numeric value associated with each certificate term into a duration counter according to a local policy defined on the server separately from the certificate terms, the server also being configured to generate a certificate request including the duration counter;

a certificate server for signing the certificate request including the duration counter; and

a client device for requesting one certificate term from the plurality of certificate terms, the client device being configured to generate the digital certificate having the valid duration period corresponding to the positive numeric value for the requested certificate term upon receiving the signed certificate request.

19. The system of claim 18, wherein the positive numeric value assigned to each certificate term is variable.

20. The system of claim 18, further comprising a server component on the server for assigning the positive numeric value for each certificate term.