CRYPTOGRAPHIC CONTROL AND MAINTENANCE OF ORGANIZATIONAL STRUCTURE AND FUNCTIONS

• US 20100011208A1
• Filed: 09/22/2009
• Published: 01/14/2010
• Est. Priority Date: 02/17/1999
• Status: Abandoned Application

• Current Assignee: Certco
• Original Assignee: Certco
• Inventors: FRANKEL, Yair, Montgomery, Charies, Yung, Marcel M.
• Application Number:
  US12/564,709
• Publication Number:
  US 20100011208A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/007 involving hierarchical structures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

Methods, systems and devices for cryptographic control and maintenance of organizational structure and functions are provided. A method for control and maintenance of an operational organizational structure, the method includes associating entities with cryptographic capabilities; organizing entities within the organizational structure as roles; and maintaining roles within the organizational structure. The system may involve at least a Public Key Infrastructure operation. Elements in said organizational structure may be assigned to roles and/or groups within said organizational structure.

Claims

1-51. -51. (canceled)

52. A database system representing an organization involving directories representing entities, their characteristics, roles, and relationships together with their associations with cryptographic capabilities, the database system comprising following transactional components:

connection to cryptographic authorities representing the cryptographic capabilities associated with said entities, said characteristics and said relationships;

a maintenance system by which said database and said cryptographic authorities are maintained in coordination and by authorized parties assuring the representation of said organization and said cryptographic capabilities are soundly associated as defined by the coordination directives;

maintenance transactions acting within said maintenance system, maintaining view representing an organization.

53. A system as in claim 52 wherein said organization comprises a plurality of entities.

54. A system as in claim 52 wherein said cryptographic authorities is a plurality of at least one certification authorities.

56. A system as in claim 52 wherein said cryptographic authorities is a plurality of authorities organized hierarchically.

57. A system as in claim 52 wherein said authorized parties are maintained by another instantiation of the system.

58. A system as in claim 52 wherein said authorized parties are assigned by management of said organization.

59. A system as in claim 52 wherein said coordinating directives involve cryptographic fields assuring integrity of the operation.

60. A system as in claim 52 wherein said maintaining view representing an organization may present different characteristics and components to different outside reviewers.

61. A system as in claim 52 wherein said cryptographic capabilities involve digital certificates.

62. A system as in claim 52 wherein said organization comprise various organizational units.

63. A system as in claim 52 wherein said organization comprise of various organizational units where entities are defined in one unit and their roles are defined within a second unit.