Back to results
US 11,057,368 B2Granted
Issuing a certificate based on an identification of an application
AssigneeFortanix, Inc.
InventorsAndrew Leiserson, Jethro Gideon Beekman, Manas Agarwal
Life of this patent
Estimating the term…
Abstract
A request to issue a digital certificate may be received. A hash value corresponding to an application that has provided the request for the digital certificate may be identified. A determination may be made as to whether the hash value corresponding to the application matches with a known hash value. In response to determining that the hash value corresponding to the application matches with the known hash value the digital certificate may be issued to the application.
Claims16
A method comprising:
- receiving a request to issue a digital certificate, wherein the request includes a specified hash value generated from execution code of a requesting application that has provided the request for the digital certificate, and the request further includes an identification of a network domain of the requesting application;
- receiving at least one data structure comprising a plurality of hash values, wherein each of the hash values is associated by the data structure with a particular application and a particular network domain, wherein the hash value associated with each particular application is generated from execution code of the corresponding particular application;
- determining whether the specified hash value corresponding to the requesting application matches with a known hash value associated with one of the particular applications to determine whether the execution code of the requesting application has changes as compared to execution code of the one of the particular applications, wherein the known hash value is from the plurality of hash values, and the network domain of the requesting application matches with a known network domain associated with the known hash value;
- and
- in response to determining that the specified hash value corresponding to the requesting application matches with the known hash value and the network domain of the requesting application matches with the known network domain, issuing, by a processing device of a digital certificate manager, the digital certificate to the requesting application.
2 more elements
A system comprising:
- a memory;
- and
- a processing device, operatively coupled with the memory, to:
- receive a request to issue a digital certificate, wherein the request includes a specified hash value generated from execution code of a requesting application that has provided the request for the digital certificate, and the request further includes an identification of a network domain of the requesting application;
- receive at least one data structure comprising a plurality of hash values, wherein each of the hash values is associated by the data structure with a particular application and a particular network domain, wherein the hash value associated with each particular application is generated from execution code of the corresponding particular application;
- determine whether the specified hash value corresponding to the requesting application matches with a known hash value associated with one of the particular applications to determine whether the execution code of the requesting application has changes as compared to execution code of the one of the particular applications, wherein the known hash value is from the plurality of hash values and the network domain of the requesting application matches with a known network domain associated with the known hash value;
- and
- in response to determining that the specified hash value corresponding to the requesting application matches with the known hash value and the network domain of the requesting application matches with the known network domain, issue, by a digital certificate manager, the digital certificate to the requesting application.
5 more elements
A non-transitory computer readable medium comprising data that, when accessed by a processing device, cause the processing device to perform operations comprising:
- receiving a request to issue a digital certificate, wherein the request includes a specified hash value generated from execution code of a requesting application that has provided the request for the digital certificate, and the request further includes an identification of a network domain of the requesting application;
- receiving at least one data structure comprising a plurality of hash values, wherein each of the hash values is associated by the data structure with a particular application and a particular network domain, wherein the hash value associated with each particular application is generated from execution code of the corresponding particular application;
- determining whether the specified hash value corresponding to the application matches with a known hash value associated with one of the particular applications to determine whether the execution code of the requesting application has changes as compared to execution code of the one of the particular applications, wherein the known hash value is from the plurality of hash values and the network domain of the requesting application matches with a known network domain associated with the known hash value;
- and
- in response to determining that the specified hash value corresponding to the requesting application matches with the known hash value and the network domain of the requesting application matches with the known network domain, issuing, by the processing device of a digital certificate manager, the digital certificate to the requesting application.
2 more elements
Dependencies are inferred from the claim text.