Third party certificate management for native mobile apps and internet of things apps
AssigneeJPMorgan Chase Bank, N.A.
InventorsReetu Raj Bok, William H. Johnston
Life of this patent
Estimating the term…
Abstract
An embodiment of the present invention is directed to providing third party certificate management for native mobile apps or IoT apps. An embodiment of the present invention is directed to performing vendor certificate pinning for trusted communications in native mobile apps without having to control vendor certificate lifecycle management. With an embodiment of the present invention, downloaded certificates may be protected by encryption, anti-tampering protection, etc.
Claims20
A computer-implemented method for providing third party certificate management for a mobile device connected to a communications network, the method comprising:
- sending, to a trusted gateway via the communications network, a request for a first certificate chain of a third party host;
- receiving, from the trusted gateway via the communications network, the first certificate chain of the third party host;
- storing the first certificate chain of the third party host;
- generating and storing a hash of the first certificate chain of the third party host;
- applying a protection to the hash;
- initiating communication with the third party host;
- downloading, from the third party host via the communications network, a second certificate chain of the third party host;
- generating a hash of the second certificate chain of the third party host and storing the hash locally;
- determining whether the hash of first certificate chain of the third party host matches the hash of second certificate chain of the third party host;
- and
- responsive to determining a match, establishing trusted communication with the third party host.
A computer-implemented system for providing third party certificate management for a mobile device connected to a communications network, the system comprising:
- a mobile device executing a mobile application, and
- a trusted gateway comprising a computer server in communication with the mobile device over a communications network;
- the mobile device programmed to perform the steps of:
- sending, to the trusted gateway via the communications network, a request for a first certificate chain of a third party host;
- receiving, from the trusted gateway via the communications network, the first certificate chain of the third party host;
- storing the first certificate chain of the third party host;
- generating and storing a hash of the first certificate chain of the third party host;
- applying a protection to the hash;
- initiating communication with the third party host;
- downloading, from the third party host via the communications network, a second certificate chain of the third party host;
- generating a hash of the second certificate chain of the third party host and storing the hash locally;
- determining whether the hash of first certificate chain of the third party host matches the hash of second certificate chain of the third party host;
- and
- responsive to determining a match, establishing trusted communication with the third party host.
Dependencies are inferred from the claim text.