Methods and systems for automated authentication, processing and issuance of digital certificates

• US 7,003,661 B2
• Filed: 10/15/2002
• Issued: 02/21/2006
• Est. Priority Date: 10/12/2001
• Status: Active Grant

• Current Assignee: DigiCert Incorporated
• Original Assignee: GeoTrust, Inc. (VeriSign, Inc.)
• Inventors: Beattie, Douglas D., Remy, David L., Bailey, Christopher T. M., Creighton, Neal Lewis Jr., Hamandi, Hani
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): Lipman, Jacob
• Application Number:
  US10/271,255
• Publication Number:
  US 20030126431A1
• Time in Patent Office: 1,225 Days
• Field of Search: 713/156
• US Class Current: 713/156
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

In a computer system and process for automated identification, processing and issuance of digital certificates, web server domain-control vetting is employed in issuance of server certificates. A Requestor requests a web server certificate from a certificate authority, the certificate authority receives the request. Based on domain information the certificate authority generates Approver email addresses, and the Requestor is required to select an Approver email address or addresses. The certificate authority contacts the Approver using the selected email address or addresses and requests that the Approver approve issuance of the certificate. If approved, the certificate authority accepts the request, and creates and signs the certificate and the signed certificate is sent to the Requestor.

Claims

1. A method for automated processing of digital certificates, comprising the steps of:

automatically vetting an entity where a digital certificate is to be used; and

generating at least one approver e-mail address that indicates an association with the entity, the e-mail address for use in contacting an approver with information for the approver to approve the digital certificate.

2. The method according to claim 1, wherein the entity is an internet domain name.

3. The method according to claim 1, wherein the entity is an IP address.

4. The method according to claim 1, wherein a requestor selects one e-mail address from a plurality of generated approver e-mail addresses.

5. The method according to claim 1, wherein a system for contacting the approver has approver contact information including approver e-mail address information.

6. The method according to claim 1, wherein at least one approver e-mail address is generated by appending a mail box identifier to the domain of an internet site for which a digital certificate is requested.

7. The method of claim 1, wherein the vetting is in response to a request received from a domain name registrant for using a secure socket layer (SSL) server certificate on the domain name site.

8. The method of claim 1, wherein the vetting is done in response to a request received from a hosting company acting on behalf of a domain name registrant.

9. The method of claim 1, wherein the vetting is performed by a server.

10. The method of claim 1, wherein the vetting includes accessing information from a domain registrar database.

11. The method of claim 1 further comprising:

a requestor submitting a request for a digital certificate to a certificate authority;

the certificate authority identifying at least one approver to approve issuance of the digital certificate;

the certificate authority contacting the approver to obtain approval for issuance of the digital certificate to the requestor,

the certificate authority receiving a response from the approver; and

the certificate authority issuing a digital certificate upon receipt of approval from the approver.

12. The method according to claim 11, wherein the issuing of the certificate is performed with a microprocessor.

13. The method according to claim 11, wherein the automatic vetting includes the certificate authority obtaining information about the requestor from a domain registrar.

14. The method according to claim 13, wherein the information obtained from the domain registrar is used by the certificate authority to identify the approver.

15. The method according to claim 11, wherein the identifying of the at least one approver includes generating an approver list, and further comprising:

providing the approver list to the requestor; and

the requestor selecting an approver for the certificate authority to contact from the approver list.

16. The method according to claim 15, wherein the approver list includes contact information for each approver, including an e-mail address.

17. The method according to claim 11, wherein the digital certificate is requested for a server.

18. The method according to claim 17, wherein the server is a web server.

19. The method of claim 11, wherein the submitting by the requestor includes submitting a certificate signing request (CSR).

20. The method of claim 1, wherein the digital certificate is for a domain name.

21. The method of claim 20, wherein the generating includes generating a plurality of e-mail addresses, each indicating an association with the domain name.

22. The method of claim 21, wherein each of the plurality of e-mail addresses includes an alias and the domain name.

23. The method of claim 22, wherein the set of aliases for a domain name includes one or more of the following:

webmaster@domain_name;

administrator@domain_name;

admin@domain_name;

info@domain_name;

sysadmin@domain_name; and

hostmaster@domain_name;

wherein “

domain_name”

is the name of the domain name.

24. The method of claim 22, wherein the set of aliases for a domain name includes all of the following:

webmaster@domain_name;

administrator@domain_name;

admin@domain_name;

info@domain_name;

sysadmin@domain_name; and

hostmaster@domain_name;

wherein “

domain_name”

is the name of the domain name.

25. The method of claim 1, wherein the vetting includes vetting without accessing information from a secretary of state or from credit report providers.

26. The method of claim 25, wherein the vetting includes accessing information from a domain registrar database.