Generation and distribution of secure or cryptographic material
AssigneeRoute1 Inc.
InventorsJerry S. Iwanski, Yamian Quintero Cantero
Life of this patent
Estimating the term…
Abstract
A user having remote device wants to access an application that requires that the user possess a user application cryptographic credential. If the application needs to verify the identity of the user, the user's remote device performs a cryptographic operation using the user application cryptographic credentials, and sends the result to the application. A configuration for securely distributing the user application cryptographic credentials includes at least one gateway located at an enterprise that is under the control of an enterprise administrator, and a controller that is not located at the enterprise but can be configured by the enterprise administrator to cooperate with the at least one gateway.
Claims20
A method of distributing a credential to a remote device configured for operation by a user, comprising:
- obtaining configuration instructions for a controller specifying whether the credential is on-demand or pre-stored, and when pre-stored, whether a provider is the controller or another entity;
- receiving, at the controller, a credential request from the remote device for the credential that the user is entitled to;
- when the configuration instructions specify that the credential is on-demand,
- (a) obtaining, by the controller, the credential for the user, and
- (b) sending the credential for the user from the controller to the remote device in response to the credential request;
- and
- when the configuration instructions specify that the credential is pre-stored,
- (c) when the configuration instructions specify that the provider is the controller, retrieving the credential from storage and sending the retrieved credential from the controller to the remote device in response to the credential request, and
- (d) when the configuration instructions specify that the provider is the another entity,
- (i) sending, from the controller to the remote device, a network address of the another entity from which the remote device can retrieve the credential, or
- (ii) forwarding the credential request to the another entity, receiving the credential from the another entity in response to the forwarded credential request, and sending the received credential from the controller to the remote device.
A controller configured to distribute a credential to a remote device configured for operation by a user, comprising:
- at least one processor configured to:
- obtain configuration instructions specifying whether the credential is on-demand or pre-stored, and when pre-stored, whether a provider is the controller or another entity;
- receive a credential request from the remote device for the credential that the user is entitled to;
- when the configuration instructions specify that the credential is on-demand,
- (a) obtain the credential for the user, and
- (b) send the credential for the user to the remote device in response to the credential request;
- and
- when the configuration instructions specify that the credential is pre-stored,
- (c) when the configuration instructions specify that the provider is the controller, retrieve the credential from storage and send the retrieved credential to the remote device in response to the credential request, and
- (d) when the configuration instructions specify that the provider is the another entity,
- (i) send, to the remote device, a network address of the another entity from which the remote device can retrieve the credential, or
- (ii) forward the credential request to the another entity, receive the credential from the another entity in response to the forwarded credential request, and send the received credential to the remote device.
Dependencies are inferred from the claim text.