Dynamic generation and processing of certificate public information directories

• US 8,656,155 B2
• Filed: 02/10/2012
• Issued: 02/18/2014
• Est. Priority Date: 02/10/2012
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dixon, Bret W., Dixon, Scot W.
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US13/370,892
• Publication Number:
  US 20130212379A1
• Time in Patent Office: 739 Days
• Field of Search: 713/156
• US Class Current: 713/156
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

Digital certificate public information is extracted using a processor from at least one digital certificate stored within at least one digital certificate storage repository. The extracted digital certificate public information is stored to at least one dynamically-created certificate public information directory. At least a portion of the digital certificate public information stored within the at least one dynamically-created certificate public information directory is provided in response to a digital certificate public information request.

Claims

1. A method, comprising:

receiving a request for digital certificate public information;

accessing, via a processor in response to the request, at least one registry that identifies hosted digital certificate public information published by a plurality of distributed certificate management agents, where at least one of the plurality of distributed certificate management agents comprises a remote certificate management agent;

determining, from the accessed at least one registry, whether a local digital certificate public information directory exists and stores the requested digital certificate public information;

extracting the requested digital certificate public information from at least one of the local digital certificate public information directory and at least one digital certificate stored within at least one digital certificate storage repository; and

providing the requested digital certificate public information in response to the digital certificate public information request;

where, in response to determining that the local digital certificate public information directory does not exist, further comprising;

dynamically creating the local digital certificate public information directory; and

storing the requested digital certificate public information within the dynamically-created local certificate public information directory to support additional digital certificate information requests.

2. The method of claim 1, where:

receiving the request for the digital certificate public information comprises receiving the request for the digital certificate public information from a local application; and

dynamically creating the local digital certificate public information directory comprises dynamically creating the local digital certificate public information directory on a device local to the local application.

3. The method of claim 1, further comprising refreshing at least a portion of the digital certificate public information stored within the dynamically-created local digital certificate public information directory.

4. The method of claim 1, further comprising publishing the stored digital certificate public information to at least one of the at least one registry that identifies contents of the dynamically-created local digital certificate public information directory.

5. The method of claim 1, further comprising:

requesting, from a remote certificate director module at a remote device, digital certificate public information associated with at least one digital certificate stored within at least one remote dynamically-created digital certificate public information directory;

receiving, from the remote certificate director module, a distribution of digital certificate public information comprising at least the requested digital certificate public information associated with the at least one digital certificate stored within the at least one remote dynamically-created digital certificate public information directory; and

storing the distribution of digital certificate public information to the dynamically-created local digital certificate public information directory.

6. The method of claim 1, further comprising:

providing a certificate query application programming interface (API) optimized for digital certificate public information storage and retrieval in association with the dynamically-created local digital certificate public information directory; and

where the request for the digital certificate public information comprises a certificate query API request for at least one item of digital certificate public information received via the certificate query API.

7. The method of claim 1, where the at least one digital certificate storage repository comprises a plurality of digital certificate storage repositories and at least two of the plurality of digital certificate storage repositories comprise diverse types of storage repositories.

8. A system, comprising:

a memory; and

a processor programmed to;

receive a request for digital certificate public information;

access, in response to the request, at least one registry that identifies hosted digital certificate public information published by a plurality of distributed certificate management agents, where at least one of the plurality of distributed certificate management agents comprises a remote certificate management agent;

determine, from the accessed at least one registry, whether a local digital certificate public information directory exists and stores the requested digital certificate public information;

extract the requested digital certificate public information from at least one of the local digital certificate public information directory and at least one digital certificate stored within at least one digital certificate storage repository; and

provide the requested digital certificate public information in response to the digital certificate public information request;

where, in response to determining that the local digital certificate public information directory does not exist, the processor is further programmed to;

dynamically create the local digital certificate public information directory; and

store the requested digital certificate public information within the dynamically-created local certificate public information directory within the memory to support additional digital certificate information requests.

9. The system of claim 8, where:

in being programmed to receive the request for digital certificate public information, the processor is programmed to receive the request for the digital certificate public information from a local application; and

in being programmed to dynamically create the local digital certificate public information directory, the processor is programmed to dynamically create the local digital certificate public information directory on a device local to the local application.

10. The system of claim 8, where the processor is further programmed to refresh at least a portion of the digital certificate public information stored within the dynamically-created local digital certificate public information directory.

11. The system of claim 8, where the processor is further programmed to:

request, from a remote certificate director module at a remote device, digital certificate public information associated with at least one digital certificate stored within at least one remote dynamically-created digital certificate public information directory;

receive, from the remote certificate director module, a distribution of digital certificate public information comprising at least the requested digital certificate public information associated with the at least one digital certificate stored within the at least one remote dynamically-created digital certificate public information directory; and

store the distribution of digital certificate public information to the dynamically-created local digital certificate public information directory within the memory.

12. The system of claim 8, where the processor is further programmed to:

provide a certificate query application programming interface (API) optimized for digital certificate public information storage and retrieval in association with the dynamically-created local digital certificate public information directory;

publish the stored digital certificate public information to at least one of the at least one registry that identifies contents of the dynamically-created local digital certificate public information directory via the certificate query API; and

where the request for the digital certificate public information request comprises a certificate query API request for at least one item of digital certificate public information received via the certificate query API.

13. A computer program product comprising a computer readable storage device including computer readable program code, where the computer readable program code when executed on a computer causes the computer to:

receive a request for digital certificate public information;

access, in response to the request, at least one registry that identifies hosted digital certificate public information published by a plurality of distributed certificate management agents, where at least one of the plurality of distributed certificate management agents comprises a remote certificate management agent;

determining, from the accessed at least one registry, whether a local digital certificate public information directory exists and stores the requested digital certificate public information;

extract the requested digital certificate public information from at least one of the local digital certificate public information directory and at least one digital certificate stored within at least one digital certificate storage repository; and

provide the requested digital certificate public information in response to the digital certificate public information request;

where, in response to determining that the local digital certificate public information directory does not exist, the computer readable program code when executed on the computer further causes the computer to;

dynamically create the local digital certificate public information directory; and

store the requested digital certificate public information within the dynamically-created local certificate public information directory to support additional digital certificate information requests.

14. The computer program product of claim 13, where:

in causing the computer to receive the request for digital certificate public information, the computer readable program code when executed on the computer causes the computer to receive the request for the digital certificate public information from a local application; and

in causing the computer to dynamically create the local digital certificate public information directory, the computer readable program code when executed on the computer causes the computer to dynamically create the local digital certificate public information directory on a device local to the local application.

15. The computer program product of claim 13, where the computer readable program code when executed on the computer further causes the computer to refresh at least a portion of the digital certificate public information stored within the dynamically-created local digital certificate public information directory.

16. The computer program product of claim 13, where the computer readable program code when executed on the computer further causes the computer to:

request, from a remote certificate director module at a remote device, digital certificate public information associated with at least one digital certificate stored within at least one remote dynamically-created digital certificate public information directory;

receive, from the remote certificate director module, a distribution of digital certificate public information comprising at least the requested digital certificate public information associated with the at least one digital certificate stored within the at least one remote dynamically-created digital certificate public information directory; and

store the distribution of digital certificate public information to the dynamically-created local digital certificate public information directory.

17. The computer program product of claim 13, where the computer readable program code when executed on the computer further causes the computer to:

provide a certificate query application programming interface (API) optimized for digital certificate public information storage and retrieval in association with the dynamically-created local digital certificate public information directory;

publish the stored digital certificate public information to at least one of the at least one registry that identifies contents of the dynamically-created local digital certificate public information directory via the certificate query API; and

where the request for the digital certificate public information comprises a certificate query API request for at least one item of digital certificate public information received via the certificate query API.