US 11,706,038 B1Granted

System and method for distributed PKI root

AssigneeCable Television Laboratories, Inc.

InventorsDarshak Thakore, Michael Glenn, Brian Alexander Scriber, Steven John Goeringer

Life of this patent

Estimating the term…

Loading patent…

Abstract

A public key infrastructure (PKI) ecosystem includes a first organization computer system having a first processor, a first memory, and a first organization process including instructions that are (i) encoded in the first memory, and (ii) executable by the first processor. The ecosystem further includes a second organization computer system having a second processor and a second memory, a digital ledger, and domain name system security extensions (DNSSEC). When executed, the first instructions cause the first processor to create at least one public/private PKI keypair for a first domain name, in the DNSSEC, register the first domain name and create a certificate authority (CA), register the CA in the blockchain, using the CA, create a certificate for a first entity, register the certificate in the blockchain and/or the DNSSEC, and assert, to the second organization computer system, trust in the first entity based on the registered certificate.

Claims20

Dependent claims

A first computer device for trust-based system, the first computer device in operable communication with a second computer device different from the first computer device, a digital ledger, and an index, the first computer device comprising:

a first processor;
and
a first memory configured to store first instructions therein, which, when executed by the first processor, cause the first processor to:
create at least one first public/private keypair for a first domain name;
in the index, register the first domain name and create a trust server;
register the trust server in the digital ledger;
using the trust server, create a first credential for a first entity;
register the first credential in at least one of the digital ledger and the index as a registered first credential;
and
assert, to the second computer device, trust in the first entity based on the registered first credential,
wherein the registered first credential is accessible to the second computer device for validation of the registered first certificate.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/866,967Filed 18 Jul 2022 · continuation
Priority: 24 Mar 2017
Granted: 18 Jul 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 9/3268
Involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements: using…
H04L 9/006
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: involving public key…
H04L 9/3239
Using cryptographic hash functions: involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
H04L 9/50
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using hash chains, e.g.…

Family

Application62/476,365Us provisional application · filed 24 Mar 2017
Application15/935,533Parent of this continuation · filed 26 Mar 2018
Application17/101,704Parent of this continuation · filed 23 Nov 2020
US 10,848,322 B2Parent of this continuation · filed 24 Nov 2020
US 11,394,564 B1Parent of this continuation
US 2018/0278427 A1Published application
US 11,706,038 B1This patent

From the US filing history. Foreign family members aren’t listed.