System and method for configuring a valid duration period for a digital certificate

• US 20090228703A1
• Filed: 03/10/2008
• Published: 09/10/2009
• Est. Priority Date: 03/10/2008
• Status: Active Grant

• Current Assignee: SecureAuth Incorporated
• Original Assignee: SecureAuth Incorporated
• Inventors: Moore, Steven, Lund, Craig, Lambiase, Mark, Grajek, Garret
• Granted Patent: US 8,301,877 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method and system for configuring a valid duration period for a digital certificate. The method includes assigning a positive numeric value for each certificate term. The positive numeric value assigned to each certificate term is representative of the valid duration period. The method continues by prompting a user of the client device to request one certificate term. The method may include transmitting the requested certificate term to a server. The certificate term requested is sent via a certificate request. The server is configured to convert the positive numeric value associated with the requested certificate term into a duration counter. The method may also include a certificate server receiving from the server, the certificate request including the duration counter. The certificate server is configured to digitally sign the certificate request. The method may conclude with the client device generating the digital certificate having the valid duration period correspond to the positive numeric value associated with the requested certificate term.

Claims

1. A method for configuring a valid duration period for a digital certificate having a certificate term, the method comprising:

assigning a positive numeric value for each certificate term from a plurality of certificate terms, the positive numeric value being representative of the valid duration period;

prompting a user of a client device to request one certificate term from the plurality of certificate terms;

transmitting the requested certificate term to a server via a certificate request, the server being configured to convert the positive numeric value associated with the requested certificate term into a duration counter;

receiving on a certificate server the certificate request having the duration counter, the certificate server being configured to sign the certificate request; and

generating the digital certificate having the valid duration period correspond to the positive numeric value associated with the requested certificate term in response to receiving the signed certificate request.

2. The method of claim 1, wherein the plurality of certificate terms include a long-term certificate and a short-term certificate.

3. The method of claim 1, wherein the server further comprises a server component, the server component being in communication with the client device.

4. The method of claim 3, wherein the client device further comprises a client component, the client component being configured to prompt a user of the client device to select one certificate term in response to establishing a communication link with the server component.

5. The method of claim 1, wherein the duration counter is a computer understood time unit.

6. The method of claim 3, wherein the server component is accessible by a server administrator for assigning the positive numeric value associated with each certificate term from the plurality of certificate terms.

7. The method of claim 1, wherein the certificate server further comprises a certificate policy component, the certificate policy component being configured to access the duration counter received with the certificate request.

8. The method of claim 7, wherein the certificate policy component is programmed to digitally sign the certificate request with the valid duration period corresponding to the duration counter.

9. The method of claim 4, wherein the client component is transmitted to the client device from the server component.

10. The method of claim 4, wherein the client component is installed on the client device independent of the server component.

11. The method of claim 1, wherein the user does not request the certificate term, the certificate term being selected by default by the server.

12. A method for configuring a valid duration period for a digital certificate, the method comprising:

establishing a communication link between a client device and a server via a web browser;

selecting a certificate term via the web browser in response to establishing the communication link;

associating a positive numeric value with the certificate term on the server, the server being configured to convert the positive numeric value into a duration counter;

transmitting a certificate request having the duration counter to a certificate server, the certificate server being configured to sign the certificate request;

receiving on the client device via the web browser the signed certificate request; and

generating the digital certificate having the valid duration period correspond to the positive numeric value associated with the certificate term in response to receiving the signed certificate request.

13. The method of claim 12, wherein the certificate term is selected from a plurality of certificate terms.

14. The method of claim 12, wherein the duration counter is a computer understood time unit.

15. The method of claim 13, wherein the plurality of certificate terms include a long-term certificate and a short-term certificate.

16. The method of claim 15, wherein the positive numeric value for the long-term certificate may be any value between 1 and 3650, the positive numeric value being representative of the quantity of days the long-term certificate is valid.

17. The method of claim 15, wherein the positive numeric value for the short-term certificate may be any value between 1 and 24, the positive numeric value being representative of the quantity of hours the short-term certificate is valid.

18. A system for configuring a valid duration period for a digital certificate, the system comprising:

a plurality of certificate terms, each certificate term having a positive numeric value assigned therein, the positive numeric value being representative of a quantity of time;

a server for storing the plurality of certificate terms, the server being configured to convert the positive numeric value associated with each certificate term into a duration counter, the server also being configured to generate a certificate request including the duration counter;

a certificate server for signing the certificate request including the duration counter; and

a client device for requesting one certificate term from the plurality of certificate terms, the client device being configured to generate the digital certificate having the valid duration period corresponding to the positive numeric value for the requested certificate term upon receiving the signed certificate request.

19. The system of claim 18, wherein the positive numeric value assigned to each certificate term is variable.

20. The system of claim 18, further comprising a server component on the server for assigning the positive numeric value for each certificate term.