US 10,382,213 B1Granted

Certificate registration

AssigneeAmazon Technologies, Inc.

InventorsMark Edward Rafn, Ashutosh Thakur, Rameez Loladia, James Christopher Sorenson, III, Christoph Saalfeld

Life of this patent

Estimating the term…

Loading patent…

Abstract

A technology is provided for certificate authentication for registering a certificate in computing service environment. A request may be received to register a certificate authority (CA) certificate. A registration token associated with a customer account in a service provider environment may be generated to enable association of the customer account with the CA certificate and to authenticate a registration of the CA certificate. The registration token may be sent to a requester desiring to register the CA certificate. A verification certificate that contains the registration token and that is signed by a certificate authority (CA) of the CA certificate and the CA certificate that is signed by the CA may be received to register the CA certificate with the customer account within a service provider environment The CA certificate is persisted with the service provider environment after verifying the registration token is associated with the customer account and the CA certificate is signed by the CA.

Claims20

Dependent claims

A method, comprising:

receiving a request to register a certificate authority (CA) certificate with a customer account within a service provider environment as a parent of device certificates associated with devices configured to communicate with the service provider environment;
generating a registration token associated with an account of a customer in the service provider environment to enable association of the customer account with the CA certificate during a registration of the CA certificate for the customer account and to authenticate the registration of the CA certificate, wherein the registration token is stored in a data store of the service provider environment;
sending the registration token to a requester;
receiving a verification certificate that contains the registration token, wherein the verification certificate is signed by a certificate authority (CA) of the CA certificate, and the CA certificate is signed by the CA to register the CA certificate as the parent of the device certificates for the customer account within the service provider environment;
and
persisting the CA certificate within the data store of the service provider environment in response to verifying that the registration token is associated with the account of the customer and the CA certificate is signed by the CA.

3 more elements

At least one non-transitory machine readable storage medium having instructions embodied thereon, the instructions when executed cause one or more processors and memory to:

receive a request to register, with an account in a service provider environment, a CA (certificate authority) certificate from which a subordinate certificate associated with a device of the account inherits trustworthiness;
generate a registration token associated with the account in the service provider environment that associates the CA certificate with the account and enables authentication of a registration of the CA certificate within a data store of the service provider environment as a parent of the device certificate;
receive a verification certificate containing the registration token and that is signed by a certificate authority (CA) and receive the CA certificate that is signed by the CA;
and
register the CA certificate within the data store of the service provider environment as the parent of the device certificate by verifying the registration token is associated with the account and the CA certificate is signed by the CA.

2 more elements

Dependencies are inferred from the claim text.