Electronic authority server

• US 6,073,242 A
• Filed: 03/19/1998
• Issued: 06/06/2000
• Est. Priority Date: 03/19/1998
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Agorics Incorporated
• Inventors: Hardy, Ann Ewing, Tribble, E. Dean, Hardy, Norman
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/044,607
• Time in Patent Office: 810 Days
• Field of Search: 380/255, 380/258, 713/151, 713/155, 713/156, 713/161, 713/168, 713/169, 713/170, 713/201
• US Class Current: 726/1
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

An electronic communication authority server that provides centralized key management, implementation of role-based enterprise policies and workflow and projection of corporate authorities over trusted networks. The authority server includes a key database that associates keys, signatures and indicators of corporate authority (such as letterhead) with particular corporate roles. There can be multiple roles or a single role (e.g., employee) for each authority server. Users associated with one or more roles are permitted by the authority server to exercise authority or include the indicators of authority in their communications. The authority server also encrypts/decrypts and signs/verifies communications from/to a user using the keys and signatures associated with the role being exercised by the user for that communication. The authority server permits roles to be delegated or transferred, which facilitates the execution by the authority server of role-dependent workflow procedures. In another embodiment, keys are not associated with individual roles but with servers and/or groups of users. In this embodiment a server processes a request from one of its users in accordance with the role-based policies it embodies and then, if necessary, indicates the identity of the requesting user in the end product of the request, which it then signs using its own key and encrypts with appropriate destination keys.

Claims

1. An authority server providing authority services for one or more users of one or more clients coupled to the authority server via secure connections, the one or more users being associated with a collective entity having a set of policies for the exercise of its authority, the authority services including allowing the users to indirectly exercise the authority of the collective entity through the authority server, the authority server comprising:

a processing unit;

a memory in which applications can be executed by the processing unit;

a policy application configured to execute in the server with features that can only be directed by respective classes of users according to the set of policies; and

an authority application embodying the authority of the collective entity that is configured to respond to a request by a particular user of a particular class to direct a particular feature of the policy application by;

determining according to the set of policies and the particular class whether the particular user is allowed to direct the particular feature; and

when the particular user is allowed to direct the particular feature, executing the particular feature using any user information provided by the particular user in the request and forming a manifestation of the execution incorporating the user information when provided.

2. The authority server of claim 1, wherein the authority application is further configured to apply a verifiable authority indication to the manifestation showing that the manifestation was formed with the authority of the collective entity.

3. The authority server of claim 2, wherein the verifiable authority indication is a signed manifestation formed by the authority application using a cryptographic key.

4. The authority server of claim 3, wherein the cryptographic key is selected from:

a private key; and

a shared key.

5. The authority server of claim 3, wherein the cryptographic key is the same key for all users associated with an enterprise.

6. The authority server of claim 5, wherein:

the cryptographic key used for signing by the enterprise is a private signing key; and

the cryptographic key used for decryption by the enterprise is a private decryption key.

7. The authority server of claim 2, wherein the authority application is further configured to attach a verifiable sender indication to the manifestation showing the identity/authority of the particular user who directed the execution of the particular feature and that the execution was approved by the authority application.

8. The authority server of claim 7, wherein the identity of the particular user comprises the particular class of the particular user.

9. The authority server of claim 7, wherein the verifiable sender indication comprises a signature line indicating the identity of the particular user signed by the authority server with a cryptographic key uniquely associated with the collective entity, the cryptographic key being accessible solely to the authority application.

10. The authority server of claim 9, wherein the cryptographic key is selected from:

a private key; and

a shared key.

11. The authority server of claim 10, wherein the verifiable authority indication is a signed manifestation formed by the authority application using a cryptographic key.

12. The authority server of claim 1, wherein the policy application is chosen from a set of applications including:

an e-mail delivery/routing application;

an insurance underwriting application;

a database application;

an online sales application;

a customer help application;

a financial application;

a directory/name service application;

an accounting application;

a notary service; and

a file server application.

13. The authority server of claim 12, wherein the authority application is further configured to:

apply a verifiable authority indication to the manifestation showing that the manifestation was formed with the authority of the collective entity, and

securely transmit the manifestation.

14. The authority server of claim 13, wherein the verifiable authority indication is a signed manifestation formed by the authority application using a cryptographic key.

15. The authority server of claim 1, wherein the authority application is further configured to perform at least one of:

when permitted by the set of policies, allow a first user to delegate at least some of their authorities to a second user;

when permitted by the set of policies, allow a third user to transfer at least some of the authorities of a fourth user to a fifth user;

when permitted by the set of policies, allow a sixth user to revoke or delegate at least some of the authorities of a seventh user;

when permitted by the set of policies, assign authorities to a new user;

when permitted by the set of policies, allow a ninth user to set delegation policies such that delegation occurs automatically under appropriate circumstances; and

when permitted by the set of policies, allow a tenth user to create a limited version of an authority.

16. The authority server of claim 15, wherein the limited version of an authority is at least one of:

limited in time of applicability;

limited by inclusion of additional properties, such as logging;

limited by expiration; and

limited by reduction in scope, such as reduced spending authority.

17. The authority server of claim 1, wherein initial assignment of the users to the classes is defined by a trusted official of the collective entity and thereafter is only modifiable according to the set of policies.

18. The authority server of claim 17, wherein the initial assignment is represented in a smart card that is read by the authority server and then removed from the server to a location under control of the trusted official.

19. The authority server of claim 17, wherein the initial assignment is performed by a trusted remote service.

20. The authority server of claim 1, wherein the set of policies encompasses tenets of capability security.

21. The authority server of claim 1, wherein each class of users is associated with a respective cryptographic key.

22. The authority server of claim 1, wherein each of the servers is associated with a respective cryptographic key.

23. The authority server of claim 1, wherein the particular user allowed to direct the set of policies comprises one or more users acting cooperatively.

25. The authority server infrastructure of claim 23, wherein the authority application is further configured to apply a verifiable authority indication to the manifestation showing that the manifestation was formed with the authority of the collective entity.

27. The authority server infrastructure of claim 25, wherein the cryptographic key is the same key for all users associated with an enterprise.

28. The authority server infrastructure of claim 27, wherein:

the cryptographic key used for signing by the enterprise is a private signing key; and

the cryptographic key used for decryption by the enterprise is a private decryption key.

30. The authority server infrastructure of claim 23, wherein the policy application is chosen from a set of applications including:

an e-mail delivery/routing application;

an insurance underwriting application;

a database application;

an online sales application;

a customer help application;

a corporate financial application;

a directory/name service application;

an accounting application;

a notary service; and

a file server application.

31. The authority server infrastructure of claim 30, wherein the authority application is further configured to:

apply a verifiable authority indication to the manifestation showing that the manifestation was formed with the authority of the collective entity, and

securely transmit the manifestation.

24. An authority server infrastructure comprising:

a set of authority servers, each particular authority server providing authority services for one or more users of one or more clients coupled to the particular authority server via secure connections, the particular authority server being associated with a collective entity having a set of policies for the exercise of its authority, the authority services including allowing the users to indirectly exercise the authority of the collective entity through the authority server;

the set of authority servers being interconnected so that each particular authority server provides authority services only for its associated one or more users and any other servers connected as a collective client to the particular authority server;

the particular authority server comprising;

a processing unit;

a memory in which applications can be executed by the processing unit;

a policy application configured to execute in the server with features that can only be directed by respective classes of users according to the set of policies; and

an authority application embodying the authority of the collective entity that is configured to respond to a request by a particular user of a particular class to direct a particular feature of the policy application by;

determining according to the set of policies and the particular class whether the particular user is allowed to direct the particular feature; and

when the particular user is allowed to direct the particular feature, executing the particular feature using any user information provided by the particular user in the request and forming a manifestation of the execution incorporating the user information when provided;

such that each of the particular servers need not be aware of the set of policies and the one or more users of any other of the servers.

26. The authority server of claim 24, wherein the verifiable authority indication is a signed manifestation formed by the authority application using a cryptographic key.

29. The authority server infrastructure of claim 24, wherein the authority application is further configured to attach a verifiable sender indication to the manifestation showing the identity/authority of the particular user who directed the execution of the particular feature and that the execution was approved by the authority application.

32. The authority server infrastructure of claim 24, wherein the authority application is further configured to perform at least one of:

when permitted by the set of policies, allow a first user to delegate at least some of their authorities to a second user;

when permitted by the set of policies, allow a third user to transfer at least some of the authorities of a fourth user to a fifth user;

when permitted by the set of policies, allow a sixth user to revoke or delegate at least some of the authorities of a seventh user;

when permitted by the set of policies, assign authorities to a new user;

when permitted by the set of policies, allow a ninth user to set delegation policies such that delegation occurs automatically under appropriate circumstances; and

when permitted by the set of policies, allow a tenth user to create a limited version of an authority.

33. The authority server infrastructure of claim 32, wherein the limited version of an authority is at least one of:

limited in time of applicability;

limited by inclusion of additional properties, such as logging;

limited by expiration; and

limited by reduction in scope, such as reduced spending authority.

34. The authority server infrastructure of claim 24, wherein initial assignment of the users to the classes is defined by a trusted official of the collective entity and thereafter is only modifiable according to the set of policies.

35. The authority server infrastructure of claim 34, wherein the initial assignment is represented in a secure read only memory that is read by the authority server and then removed from the server to a location under control of the trusted official.

36. The authority server infrastructure of claim 34, wherein the initial assignment is performed by a trusted remote service.

37. An authority server configured to manage electronic communications for one or more users of one or more clients coupled to the authority server via secure connections, the one or more users being associated with a collective entity, each of the users having at least one role with the collective entity, the authority server comprising:

an authority server program configured to process a particular communication associated with a particular user so that a selected one of the one or more roles of the particular user is authoritatively associated with a processed version of the communication generated by the authority server program.

38. The authority server of claim 37, further comprising:

a cryptographic key uniquely associated with the collective entity;

wherein the processed version includes a signature line indicating the selected role of the particular user signed with the cryptographic key;

such that any recipient of the processed version who knows how to interpret the signature line is able to determine that the outgoing communication was sent by the particular user in the selected role with the collective entity.

39. The authority server of claim 37, further comprising:

a roles database accessible to the authority server program indicating which roles each of the one or more users is allowed to occupy within the collective entity;

such that, when the particular user indicates to the authority server program the selected role, the authority server is configured to verify in accordance with the roles database whether the selected role is included with the one or more roles associated with the particular user and, if so, to sign the processed version.

40. An authority server configured to manage electronic communications to and from one or more users of one or more local clients coupled to the server via trusted connections, the authority server comprising:

a keys database associating each of a plurality of roles with at least one cryptographic key; and

an authority server program configured to process a particular communication associated with a particular user in accordance with a trusted indication of the role of the particular user and information in the keys database associated with the particular user.

41. The authority server of claim 40, wherein the authority server is configured to process the particular communication using at least one action selected from:

signing the particular communication with an authorized signature key associated with the user'"'"'s role;

appending to the particular communication letterhead authorized letterhead associated with the user'"'"'s role;

encrypting the particular communication;

verifying the particular communication;

logging the particular communication; and

reporting the particular communication.

42. The authority server of claim 41, wherein, when the particular communication is an outgoing communication directed to an external destination, the action of signing the particular external communication comprises signing the particular communication with a private signing key associated with the particular user'"'"'s role.

43. The authority server of claim 40, wherein, when the particular communication is an incoming communication directed to the particular user, the action of decrypting the particular communication comprises decrypting the particular communication with a private decryption associated with the user'"'"'s role.

44. The authority server of claim 40, further comprising:

a user directory service that maps user names to internal addresses of respective clients used by the users and external destination names to external destination addresses; and

a system directory service that maps roles to keys and user names to roles;

wherein the authority server program is configured to employ the user directory and system directory services to resolve the identity and permitted roles of the particular user and the key information associated with those permitted roles.

45. The authority server of claim 44, further comprising:

a rules database that defines workflow procedures and authorized roles permitted to perform respective steps of the workflow procedures;

wherein the authority server program is configured to execute the workflow procedures as a collection of electronic communication actions in accordance with the rules database and the trusted indication of the roles of users required to participate in completion of the collection of electronic communication actions.

46. The authority server of claim 44, further comprising:

a user interface configured to enable authorized users to update information employed by the user and system directory services.

47. The authority server of claim 40, wherein the trusted connections are private and authenticated.

48. The authority server of claim 47, wherein the trusted connections are implemented using at least one of:

secure lines;

cryptographic techniques; and

secure socket layer (SSL) technology.

49. The authority server of claim 40, wherein the electronic communications comprise external communications transmitted over a network of trusted servers including the authority server.

50. The authority server of claim 49, wherein the trusted connections are implemented using at least one of:

secure lines;

cryptographic techniques; and

secure socket layer (SSL) technology.

51. An authority server configured to manage electronic communications to and from one or more users of the server who are associated with an enterprise, the authority server comprising:

a keys database associating one or more cryptographic key groups with the enterprise; and

an authority server program configured to process a particular communication associated with a particular user in accordance with a trusted indication of the particular user'"'"'s association with the enterprise and information in the keys database.

52. The authority server of claim 51, wherein the authority server is configured to process the particular communication using at least one action selected from:

signing the particular communication with a private signing key associated with the enterprise;

appending to the particular communication authorized letterhead associated with the user'"'"'s role in the enterprise;

decrypting the particular communication with a private encryption key associated with the enterprise;

encrypting the particular communication with a public encryption key associated with a second enterprise associated with a sender of the particular communication;

verifying the particular communication;

logging the particular communication; and

reporting the particular communication.

54. The computer program product of claim 51, wherein the authority server program is configured to process the particular communication using at least one action selected from:

signing the particular communication with a private signing key associated with the enterprise;

appending to the particular communication authorized letterhead associated with the user'"'"'s role in the enterprise;

encrypting the particular communication with a public encryption key associated with a second enterprise associated with the receiver of the particular communication;

decrypting the particular communication with a private encryption key associated with the enterprise;

verifying the particular communication;

logging the particular communication; and

reporting the particular communication.

53. A computer program product configured to direct an authority server to manage electronic communications to and from one or more users of the server who are associated with an enterprise, the computer program product comprising:

a keys database associating one or more cryptographic key groups with the enterprise; and

an authority server program configured to process a particular communication associated with a particular user in accordance with a trusted indication of the particular user'"'"'s association with the enterprise and information in the keys database.