Systems and methods for managing digital certificates

• US 8,726,011 B1
• Filed: 05/17/2013
• Issued: 05/13/2014
• Est. Priority Date: 05/17/2007
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Jarvie, Jay C., Vayner, Leonid, Payne, Clive Anthony
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): Mehrmanesh, Amir
• Application Number:
  US13/896,925
• Time in Patent Office: 361 Days
• Field of Search: 713/156, 713173-176, 726/10, 380277-278
• US Class Current: 713/156
• CPC Class Codes: G06Q 50/10 Services
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method of managing a digital certificate by a computer system can include the steps of receiving, the at the computer system, a business request for a digital certificate from a requester and transmitting, by the computer system, the request to a first approver. The method can further include, upon approval by the first approver, transmitting, by the computer system, the request to a second approver, upon approval by the second approver, transmitting, by the computer system, the request to a certificate manager, transmitting, by the computer system, the request to an implementer and receiving, by the computer system, from the implementer, technical information related to the request and transmitting, by the computer system, a certificate to a certificate supplier.

Claims

1. A method comprising:

receiving, by a computer system, a request for a digital certificate from a requester within an organization;

providing, by the computer system, the request to an approver within the organization;

receiving, by the computer system from the approver, an approval of the request;

providing, by the computer system, an approved request to an implementer within the organization;

receiving, by the computer system, from the implementer, technical information related to the approved request for generating a digital certificate based on the technical information;

determining, by the computer system, a computer on which the digital certificate is to be installed;

providing, by the computer system, an alert to the approver at a first time before an expiration date of the digital certificate; and

determining, by the computer system, if the approver has responded to the alert by a second time before the expiration date, and, if the approver has not responded, providing, by the computer system, an alert to another party.

2. The method of claim 1, further comprising the step of storing certificate information related to the digital certificate in a database.

3. The method of claim 2, wherein the certificate information comprises the expiration date of the certificate.

4. The method of claim 1, further comprising installing the digital certificate on the computer.

5. The method of claim 1, further comprising:

transmitting the certificate to an agent; and

installing, by the agent, the certificate on the computer.

6. The method of claim 2, further comprising:

probing, by the computer system, a plurality of computers to identify previously installed certificates;

retrieving, by the computer system, information about the previously installed certificates; and

comparing, by the computer system, the information about the previously installed certificates to the stored certificate information to determine if any installed certificates comprise information different from the stored certificate information.

7. The method of claim 6, further comprising transmitting, by the computer system, an alert regarding any installed certificates that comprise information different from the stored certificate information.

8. A method comprising:

receiving, by a computer system, a business request for a digital certificate from a requester;

providing, by the computer system, the request to a first approver;

upon approval by the first approver, transmitting, by the computer system, the request to a second approver;

upon approval by the second approver, transmitting, by the computer system, the request to an implementer;

receiving, by the computer system, from the implementer, technical information related to the business request for generating a digital certificate based on the technical information;

determining, by the computer system, a computer on which the digital certificate is to be installed;

providing, by the computer system, a first alert to the first approver at a first time before an expiration date of the digital certificate; and

determining, by the computer system, if the first approver has responded to the alert by a second time before the expiration date, and, if the first approver has not responded, providing, by the computer system, an alert to the second approver.

9. A system comprising:

a memory; and

a processor coupled to the memory, the processor configured to;

receive a request for a digital certificate from a requester within an organization,

provide the request to an approver within the organization,

receive from the approver, an approval of the request,

provide an approved request to an implementer within the organization,

receive, from the implementer, technical information related to the approved request for generating a digital certificate based on the technical information,

determine a computer on which the digital certificate is to be installed,

provide an alert to the approver at a first time before an expiration date of the digital certificate, and

determine if the approver has responded to the alert by a second time before the expiration date, and, if the approver has not responded, provide an alert to another party.

10. The system of claim 9, wherein the processor is configured to store certificate information related to the digital certificate in a database.

11. The system of claim 10, wherein the certificate information comprises the expiration date of the certificate.

12. The system of claim 9, wherein the processor is further configured to install the digital certificate on the computer.

13. The system of claim 10, wherein the processor is further configured to:

transmit the digital certificate to an agent; and

install by the agent, the digital certificate on the computer.

14. The system of claim 10, wherein the processor is further configured to:

probe a plurality of computers to identify previously installed digital certificates;

retrieve information about the previously installed digital certificates; and

compare the information about the previously installed certificates to the stored certificate information to determine if any of the previously installed certificates comprise information different from the stored certificate information.

15. The system of claim 14, wherein the processor is further configured to transmit an alert regarding any previously installed certificates that comprise information different from the stored certificate information.

16. A non-transitory computer-readable medium comprising instructions that, when executed by a computer system, cause the computer system to perform operations comprising:

receiving a business request for a digital certificate from a requester within an organization;

providing the request to an approver within the organization;

providing upon approval of the request by the approver, the request to an implementer;

receiving from the implementer, technical information related to the approved request for generating a digital certificate based on the technical information;

providing a first alert to the approver at a first time before an expiration date of the digital certificate; and

determining if the approver has responded to the first alert by a second time before the expiration date, and, if the approver has not responded, providing, by the computer system, a second alert to another party.