Configuring a valid duration period for a digital certificate

• US 8,812,838 B2
• Filed: 06/17/2013
• Issued: 08/19/2014
• Est. Priority Date: 03/10/2008
• Status: Active Grant

• Current Assignee: SecureAuth Incorporated
• Original Assignee: SecureAuth Incorporated
• Inventors: Grajek, Garret Florian, Moore, Stephen, Lambiase, Mark V., Lund, Craig J.
• Primary Examiner(s): Chea, Philip
• Assistant Examiner(s): DOLLY, KENDALL LYNN
• Application Number:
  US13/919,337
• Publication Number:
  US 20130275750A1
• Time in Patent Office: 428 Days
• Field of Search: 713/156, 713/175, 380/277
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A valid duration period for a digital certificate is established by a process that includes assigning numeric values to certificate term. The numeric value assigned to each certificate term is representative of the valid duration period. The method continues by identifying one certificate term, which may include requesting a user to select a certificate term. The method may include transmitting the requested certificate term to a server. The certificate term requested is sent via a certificate request. The server is configured to convert the numeric value associated with the requested certificate term into a duration counter value. The method may also include a certificate server receiving from the server, the certificate request including the duration counter value. The method may conclude with transmitting the signed certificate request to a client device capable of generating the digital certificate with the requested certificate term.

Claims

1. A method for configuring a valid duration period for a digital certificate having a certificate term, the method comprising:

identifying a certificate term of a plurality of certificate terms, each certificate term associated with a numeric value being representative of a valid duration period;

converting the numeric value associated with the identified certificate term into a duration counter value according to a local policy;

signing a certificate request generated by a client device capable of generating a digital certificate associated with the certificate request, the certificate request including the duration counter value;

transmitting the signed certificate request to the client device capable of generating the digital certificate, the digital certificate having the valid duration period corresponding to the numeric value converted from the identified certificate term being generated on the client device based upon the signed certificate request,

said method performed by a computing system that comprises one or more computing devices.

2. The method of claim 1, wherein identifying the certificate term comprises the server selecting the certificate term by default.

3. The method of claim 1, further comprising:

transmitting, to the client device, data configured to request a user to select the certificate term from the plurality of certificate terms; and

receiving an indication of the certificate term on a server via a certificate request.

4. The method of claim 3, wherein the plurality of certificate terms include a long-term certificate and a short-term certificate.

5. The method of claim 1, wherein the client device is a mobile device.

6. The method of claim 1, wherein the duration counter value is a computer understood time unit.

7. The method of claim 3, wherein the server is accessible by a server administrator for assigning the numeric value associated with each certificate term of the plurality of certificate terms.

8. The method of claim 6, wherein the signed certificate request comprises a digital signature representing authenticity of the valid duration period corresponding to the duration counter value.

9. Non-transitory computer storage that comprises executable instructions that direct a computing system to at least:

transmit, to a mobile client device, data configured to request a user to identify a certificate term from a plurality of certificate terms;

receive an indication of the identified certificate term from the mobile client device;

convert the numeric value associated with the identified certificate term into a duration counter value according to a local policy;

sign a certificate request associated with the mobile client device, the certificate request including the duration counter value; and

transmit the signed certificate request to the mobile client device, the signed certificate request being associated with a digital certificate having the valid duration period corresponding to the numeric value converted from the identified certificate term, wherein the digital certificate is associated with the mobile client device.

10. The non-transitory computer storage of claim 9, wherein the duration counter value is a computer understood time unit.

11. The non-transitory computer storage of claim 9, further comprising executable instructions that direct a computing system to, prior to signing the certificate request, authenticate the mobile client device.

12. The non-transitory computer storage of claim 9, wherein the data configured to request the user to identify the certificate term from the plurality of certificate terms is based upon automated parameters existing on the mobile client device.

13. A system for configuring a valid duration period for a digital certificate, the system comprising:

a computing system comprising one or more computing devices, said computing system programmed via executable instruction to at least;

transmit, to a client device, data configured to prompt a user to select a certificate term from the plurality of certificate terms, each certificate term associated with a numeric value being representative of a valid duration period;

receive, from the client device, an indication of a selected certificate term of the plurality of certificate terms;

convert the numeric value associated with the selected certificate term into a duration counter value according to a local policy;

sign a certificate request, the certificate request including the duration counter value;

transmit the signed certificate request to the client device, the signed certificate request configured to be converted to a digital certificate having the valid duration period corresponding to the numeric value converted from the selected certificate term.

14. The system of claim 13, wherein the client device is a mobile device.

15. The system of claim 13, wherein the plurality of certificate terms include a long-term certificate and a short-term certificate.

16. The system of claim 13, wherein the data configured to prompt a user to select the certificate term from the plurality of certificate terms is one of:

an Active-X component or a .Net component.

17. The system of claim 13, wherein the computing system comprises a single server.

18. The system of claim 13, wherein the server is accessible by a server administrator for assigning the numeric value associated with each certificate term of the plurality of certificate terms.

19. The system of claim 13, wherein the computer system comprises a server and a certificate server, wherein the local policy is defined by the certificate server, and wherein the signature of the certificate request is performed by the certificate server.

20. The system of claim 13, wherein the computing system is further programmed via executable instruction to at least, prior to transmitting data, determine if the user of the client device is authorized to access the server.