Systems and methods for managing digital certificates

• US 8,473,735 B1
• Filed: 05/19/2008
• Issued: 06/25/2013
• Est. Priority Date: 05/17/2007
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase & Co
• Inventors: Vayner, Leonid, Jarvie, Jay C., Payne, Clive Anthony
• Primary Examiner(s): Nalven, Andrew L
• Assistant Examiner(s): Mehrmanesh, Amir
• Application Number:
  US12/122,944
• Time in Patent Office: 1,863 Days
• Field of Search: 713/156, 713173-176, 726/10, 380277-278
• US Class Current: 713/156
• CPC Class Codes: G06Q 50/10 Services
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method of managing a digital certificate by a computer system can include the steps of receiving, the at the computer system, a business request for a digital certificate from a requester and transmitting, by the computer system, the request to a first approver. The method can further include, upon approval by the first approver, transmitting, by the computer system, the request to a second approver, upon approval by the second approver, transmitting, by the computer system, the request to a certificate manager, transmitting, by the computer system, the request to an implementer and receiving, by the computer system, from the implementer, technical information related to the request and transmitting, by the computer system, a certificate to a certificate supplier.

Claims

1. A method of managing a digital certificate within an organization, by a computer system, the method comprising the steps of:

receiving, at the computer system, a business request for a digital certificate from a requester within the organization;

providing, by the computer system, the request for a digital certificate to an approver within the organization;

receiving, by the computer system from the approver, an approval of the request for a digital certificate;

providing, following approval of the request for a digital certificate by the approver, an approved request to a certificate manager within the organization;

receiving, by the computer system from the certificate manager, a selection of an implementer within the organization;

providing, by the computer system, the approved request to the selected implementer within the organization;

receiving, by the computer system, from the implementer, technical information related to the approved request;

generating a digital certificate comprising the technical information;

transmitting, by the computer system, the digital certificate comprising the technical information to a certificate supplier for verification;

transmitting, by the computer system, a first alert to the approver at a first predetermined time before an expiration date of the digital certificate; and

determining, by the computer system, if the approver has responded to the first alert by a second predetermined time before the expiration date, and, if the approver has not responded, transmitting a second alert to another party.

2. The method of claim 1, further comprising the step of:

storing certificate information comprising the expiration date in a database.

3. The method of claim 2, further comprising the steps of:

determining, from the certificate information, a computer on which the digital certificate is to be installed; and

automatically installing the digital certificate on the computer.

4. The method of claim 2, further comprising the steps of:

determining, from the certificate information, a computer on which the digital certificate is to be installed;

automatically transmitting the digital certificate to an agent; and

automatically installing, by the agent, the digital certificate on the computer.

5. The method of claim 2, further comprising the steps of:

probing, by the computer system, computers for installed digital certificates;

retrieving, by the computer system, information about the installed digital certificates; and

comparing, by the computer system, the information about the installed digital certificates to the stored certificate information to determine if any installed digital certificates include information different from the stored certificate information.

6. The method of claim 5, further comprising the step of:

transmitting, by the computer system, an alert regarding any installed digital certificates that include information different from the stored certificate information.

7. A method of managing a digital certificate within an organization, by a computer system, the method comprising the steps of:

receiving, at the computer system, a business request for a digital certificate from a requester within the organization;

providing, by the computer system, the request for a digital certificate to a first approver within the organization for a business related approval;

upon the business related approval by the first approver, providing, by the computer system, a business-approved request to a second approver within the organization for an information risk related approval;

upon the information risk related approval by the second approver, transmitting, by the computer system, an approved request to a certificate manager within the organization;

receiving, by the computer system from the certificate manager, a selection of an implementer within the organization;

providing, by the computer system, the request to the selected implementer within the organization;

receiving, by the computer system, from the implementer, technical information related to the approved request;

generating a digital certificate comprising the technical information;

transmitting, by the computer system, the digital certificate comprising the technical information to a certificate supplier for verification;

transmitting, by the computer system, a first alert to the approver at a first predetermined time before an expiration date of the digital certificate; and

determining, by the computer system, if the approver has responded to the first alert by a second predetermined time before the expiration date, and, if the approver has not responded, transmitting a second alert to another party.

8. A computerized system for managing a digital certificate within an organization, the computerized system comprising:

one or more communicatively coupled processors, the one or more processors forming a computer system configured to perform the steps of;

receiving, at the computer system, a business request for a digital certificate from a requester within the organization;

providing, by the computer system, the request for a digital certificate to an approver within the organization;

receiving, by the computer system from the approver, an approval of the request for a digital certificate;

providing, following approval of the request for a digital certificate by the approver, an approved request to a certificate manager within the organization;

receiving, by the computer system from the certificate manager, a selection of an implementer within the organization;

providing, by the computer system, the approved request to the selected implementer within the organization;

receiving, by the computer system, from the implementer, technical information related to the approved request;

generating a digital certificate comprising the technical information;

transmitting, by the computer system, the digital certificate comprising the technical information to a certificate supplier for verification;

transmitting, by the computer system, a first alert to the approver at a first predetermined time before an expiration date of the digital certificate; and

determining, by the computer system, if the approver has responded to the first alert by a second predetermined time before the expiration date, and, if the approver has not responded, transmitting a second alert to another party.

9. The system of claim 8, the one or more processors further configured to perform the steps of:

storing certificate information comprising the expiration date in a database.

10. The system of claim 9, the one or more processors further configured to perform the steps of:

determining, from the certificate information, a computer on which the digital certificate is to be installed; and

automatically installing the digital certificate on the computer.

11. The system of claim 9, the one or more processors further configured to perform the steps of:

determining, from the certificate information, a computer on which the digital certificate is to be installed;

automatically transmitting the digital certificate to an agent; and

automatically installing, by the agent, the digital certificate on the computer.

12. The system of claim 9, further comprising the steps of:

probing, by the computer system, computers for installed digital certificates;

retrieving, by the computer system, information about the installed digital certificates; and

comparing, by the computer system, the information about the installed digital certificates to the stored certificate information to determine if any installed digital certificates include information different from the stored certificate information.

13. The system of claim 12, the one or more processors further configured to perform the steps of:

transmitting, by the computer system, an alert regarding any installed digital certificates that include information different from the stored certificate information.

14. A method of managing a digital certificate within an organization, by a computer system, the method comprising the steps of:

receiving, at the computer system, a business request for a digital certificate from a requester within the organization;

providing, by the computer system, the request for a digital certificate to an approver within the organization;

receiving, by the computer system from the approver, an approval of the request for a digital certificate;

providing, following approval of the request for a digital certificate by the approver, an approved request to a certificate manager within the organization;

receiving, by the computer system from the certificate manager, a selection of an implementer within the organization;

transmitting providing, by the computer system, the approved request to the selected implementer within the organization, wherein the implementer is selected by the certificate manager;

receiving, by the computer system, from the implementer, technical information related to the approved request;

generating a digital certificate comprising the technical information;

transmitting, by the computer system, the digital certificate comprising the technical information to a certificate supplier for verification;

storing certificate information related to a verified digital certificate in a database, wherein the certificate information includes an expiration date of the verified digital certificate;

determining, by the computer system, if the approver has responded to an alert by a predetermined time before the expiration date, and, if the approver has not responded, transmitting, by the computer system, a second alert to another party;

determining, from the certificate information, a computer on which the verified digital certificate is to be installed;

automatically installing the verified digital certificate on the computer;

probing, by the computer system, computers for installed digital certificates;

retrieving, by the computer system, information about the installed digital certificates;

comparing, by the computer system, the information about the installed digital certificates to the stored certificate information to determine if any installed digital certificates include information different from the stored certificate information; and

transmitting, by the computer system, an alert regarding any installed digital certificates that include information different from the stored certificate information.