US 11,444,935 B2Granted

Certificate-based client authentication and authorization for automated interface

AssigneeARRIS Enterprises LLC

InventorsTat Keung Chan, Jinsong Zheng, Alexander Medvinsky, Ting Yao, Jason A. Pasion, Eric Brunnett-Lazarte, Cheng Li

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method and system provide the ability to authenticate client services. A private key and a client certificate are created and delivered to a client. Based on the private key and the certificate, a client account is created for the client on a server. One or more signing or feature licensing configurations are created and authorized on the server for the client account. The client certificate and a request to perform a requested client service are received on the server from a client. The request includes configuration information for the requested client service. The server verifies the client certificate and determines whether the client is authorized to perform the requested client service. The determination is based on the configuration information and the one or more authorized client operations. Upon determining that the client is authorized to perform the requested client service, the request is processed the authorization is sent to the client. Upon a determination that the client is not authorized to perform the requested client service, the requested client service is denied.

Claims18

Dependent claims

A computer-implemented method of authenticating client services, comprising:

creating a private key and a client certificate for a client service application;
delivering the private key and the client certificate for installation in an environment of the client service application
creating, based on the private key and the certificate, a client account for the client service application on a server;
defining, on the server, one or more authorized client operations for the client account;
receiving, from the client service application on the server, the client certificate and a request to perform a requested client service, wherein the request comprises a server configuration identifier for the requested client service;
verifying, on the server, the client certificate at an application layer;
extracting a client account ID from the client certificate;
determining whether the client account corresponding to the client service application is authorized to perform the requested client service, wherein the determining is based on the client account ID and configuration information associated with the server configuration identifier;
upon determining that the client account is authorized to perform the requested client service, processing the request and sending the authorization to the client service application;
and
upon determining that the client account is not authorized to perform the requested client service, denying the requested client service.

8 more elements

A computer-implemented system for enforcing application protection, comprising:

(a) a server computing environment communicatively coupled to a client computing environment executing a client service application, wherein the server computing environment comprises one or more computers;
(b) the one or more computers, wherein each of the one or more computers has a memory storing a set of instructions and a processor that executes the set of instructions;
(c) a certificate authority (CA) utility executing on one or more of the processors via the set of instructions, wherein the set of instructions when executed cause the CA utility to:
(i) create a private key and a client certificate for a client in the client computing environment;
(ii) deliver the private key and the client certificate to the client service application;
(d) a server process executing on one or more of the processors in the server computing environment via the set of instructions, wherein the set of instructions when executed cause the server process to:
(i) create, based on the private key and the certificate, a client account for the client in the server computing environment;
(ii) define, on the server computing environment, one or more authorized client operations for the client account;
(iii) receive, from the client service application, the client certificate and a request to perform a requested client service, wherein the request comprises a server configuration identifier for the requested client service;
(iv) verify the client certificate at an application layer;
(v) extract a client account ID from the client certificate;
(vi) determine whether the client account corresponding to the client service application is authorized to perform the requested client service, wherein the determination is based on the client account ID and configuration information associated with the server configuration identifier;
(vii) upon a determination that the client account is authorized to perform the requested client service, process the request and send the result of the requested client service to the client service application;
and
(vii) upon a determination that the client is not authorized to perform the requested client service, deny the requested client service.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/119,646Filed 11 Dec 2020 · us provisional application
Priority: 11 Dec 2019
Published: US 2021/0194704 A124 Jun 2021
Granted: 13 Sep 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 9/3265
Involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements: using…
H04L 63/0823
For authentication of entities: using certificates
G06F 21/105
Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]: arrangements for…
G06F 21/33
User authentication: using certificates

Family

Application62/946,928Us provisional application · filed 11 Dec 2019
Application63/073,579Us provisional application · filed 2 Sep 2020
US 2021/0194704 A1Pre-grant publication · published 24 Jun 2021
US 11,444,935 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key