Dynamic framework for certificate application configuration

• US 9,166,970 B1
• Filed: 05/17/2013
• Issued: 10/20/2015
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: DigiCert Incorporated
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Dundas, Alan, Herskedal, Eirik, Harning, Thomas, Diers, Aaron
• Primary Examiner(s): SHAW, PETER C
• Application Number:
  US13/896,504
• Time in Patent Office: 886 Days
• Field of Search: 713/156
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A script hosting server receives a script from an authenticated source, associates the script with a certificate profile for digital certificates based on input from the authenticated source, receives user enrollment information for the certificate profile from the authenticated source, receives a script request of a client device, the script request identifying the certificate profile and a user of the client device, determines whether the user is enrolled in the certificate profile based on the user enrollment information, and, upon determining that the user is enrolled, providing the scripts to the client device.

Claims

1. A method comprising:

receiving, by a script hosting server, a script from an authenticated source;

storing, by the script hosting server, the script in a script database;

associating, by the script hosting server, the script with a certificate profile for a digital certificate based on input from the authenticated source, wherein more than one script can be associated with the certificate profile;

receiving, by the script hosting server, user enrollment information for the certificate profile from the authenticated source, wherein the user enrollment information indicates an enrolled user for the certificate profile;

storing the user enrollment information in a user database;

receiving, by the script hosting server, a script request of a client device, the script request identifying the certificate profile and a user of the client device;

determining, by the script hosting server, whether-when the user is enrolled in the certificate profile based on the user enrollment information in the user database; and

upon determining that the user is enrolled, providing the associated one or more scripts to the client device.

2. The method of claim 1 further comprising digitally signing the associated one or more scripts one or more scripts with a digital signature.

3. The method of claim 1, wherein the associated one or more scripts are digitally signed by the authenticated source.

4. The method of claim 1, wherein the request for the associated one or more scripts is received in response to a certificate lifecycle event.

5. The method of claim 4, wherein the certificate lifecycle event is any one of enrolling, renewing, or importing the digital certificate.

6. The method of claim 1, wherein the associated one or more script are to automatically configure an application.

7. A system comprising:

a server comprising a memory and a processing device coupled to the memory, the processing device is to;

receive a script from an authenticated source;

store the script in a script database;

associate the script with a certificate profile for a digital certificate based on input from the authenticated source, wherein more than one script can be associated with the certificate profile;

receive user enrollment information for the certificate profile from the authenticated source, wherein the user enrollment information indicates an enrolled user for the certificate profile;

store the user enrollment information in a user database receive a script request of a client device, the script request identifying the certificate profile and a user of the client device;

determine whether-when the user is enrolled in the certificate profile based on the user enrollment information; and

upon determining that the user is enrolled, providing the associated one or more scripts to the client device.

8. The system of claim 7 further comprising a client device executing a security agent, wherein the security agent is to:

detect a lifecycle event associated with the certificate profile in response to user input;

receive the associated one or more scripts; and

initiate execution of the associated one or more scripts to configure an application.

9. The system of claim 7, wherein the associated one or more scripts are digitally signed by the authenticated source.

10. The system of claim 7, wherein the request for the associated one or more scripts is received in response to a certificate lifecycle event.

11. The system of claim 7, wherein the processing device is further configured to send the digital certificate to the client device.

12. The system of claim 7, wherein the associated one or more scripts comprises a script for automatic application configuration.

13. A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform a set of operations comprising:

receiving a script from an authenticated source;

storing the script in a script database;

associating the script with a certificate profile for a digital certificate based on input from the authenticated source, wherein more than one script can be associated with the certificate profile;

receiving user enrollment information for the certificate profile from the authenticated source, wherein the user enrollment information indicates an enrolled user for the certificate profile;

storing the user enrollment information in a user database receiving a script request of a client device, the script request identifying the certificate profile and a user of the client device;

determining whether-when the user is enrolled in the certificate profile based on the user enrollment information in the user database; and

upon determining that the user is enrolled, providing the associated one or more scripts to the client device.

14. The non-transitory computer readable storage medium of claim 13, wherein the set of operations further comprises digitally signing the associated one or more scripts with a digital signature.

15. The non-transitory computer readable storage medium of claim 13, wherein the associated one or more scripts are digitally signed by the authenticated source.

16. The non-transitory computer readable storage medium of claim 13, wherein the request for the associated one or more scripts is received in response to a certificate lifecycle event.

17. The non-transitory computer readable storage medium of claim 16, wherein the certificate lifecycle event is any one of enrolling, renewing, or importing the digital certificate.

18. The non-transitory computer readable storage medium of claim 13, wherein the associated one or more scripts are to automatically configure an application.