Method and apparatus for creating a secure connection between a java applet and a web server

• US 5,870,544 A
• Filed: 10/20/1997
• Issued: 02/09/1999
• Est. Priority Date: 10/20/1997
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Curtis, Bryce Allen
• Primary Examiner(s): Hua, Ly
• Application Number:
  US08/954,615
• Time in Patent Office: 477 Days
• Field of Search: 395/187.01, 395/200.33, 395/200.57, 395/200.59, 395/200.58, 390/49
• US Class Current: 726/14
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present invention defines a a method, an apparatus and a computer program product for establishing a secure connection between a Java Applet and a secure web server for protocols other than Https via the use of a Java Security Service. More specifically, the present invention uses the web browser'"'"'s installed certificates to setup and establish an encrypted session between the Java Applet and the secure web server. The secure connection is then used to retrieve the certificates required by the Java security service.

Claims

1. A method of establishing a secure connection between a client via a web browser and a web server, the method comprising the steps of:

storing a private keyring for the client on the web server, the private keyring including approved certificates;

retrieving the private keyring from the server via the web browser;

creating a secure connection between the web server and a java security service executing on the client;

retrieving, using the java security service, over the secured connection the server certificate; and

approving the retrieved server certificate via the private client keyring.

3. The method of claim 1 wherein the step of retrieving the private key ring, includes the steps of:

requesting an HTML web page from the server, the HTML web page including an applet tag for executing an applet;

executing, in response to retrieving the requested HTML web page, the applet identified by the applet tag; and

retrieving, via the applet, the private keyring from the server.

2. An apparatus for establishing a secure connection between a client via a web browser and a web server, the apparatus comprising:

means for storing a private keyring for the client on the web server, the private keyring including approved certificates;

means for retrieving the private keyring from the server via the web browser;

means for creating a secure connection between the web server and a java security service executing on the client;

means for retrieving, using the java security service, over the secured connection the server certificate; and

means for approving the retrieved server certificate via the private client keyring.

4. The apparatus of claim 2 wherein the means for retrieving the private key ring, includes:

means for requesting an HTML web page from the server, the HTML web page including an applet tag for executing an applet;

means for executing, in response to retrieving the requested HTML web page, the applet identified by the applet tag; and

means for retrieving, via the applet, the private keyring from the server.

5. A computer program product comprising:

a computer readable usable medium having computer readable program code means embodied in the medium for establishing a secure connection, using a web browser, between a client and a web server, the computer readable program code means including;

means for storing a private keyring for the client on the web server, the private keyring including approved certificates;

means for retrieving the private keyring from the server via the web browser;

means for creating a secure connection between the web server and a java security service executing on the client;

means for retrieving, using the java security service, over the secured connection the server certificate; and

means for approving the retrieved server certificate via the private client keyring.

6. The computer program product of claim 5 wherein the means for retrieving the private key ring, includes:

means for requesting an HTML web page from the server, the HTML web page including an applet tag for executing an applet;

means for executing, in response to retrieving the requested HTML web page, the applet identified by the applet tag; and

means for retrieving, via the applet, the private keyring from the server.