# US 11,909,894 B2 · Method and apparatus for generating a dynamic security certificate

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,909,894 B2
- Document ID: US11909894B2
- Status: Granted
- Kind: B2
- Application number: 18/076,887
- Filed: 2022-12-07
- Published: 2023-05-25
- Granted: 2024-02-20
- Earliest claimed: 2021-11-23
- Assignees: Uab 360 It
- Applicants: Uab 360 It
- Inventors: Emanuelis Norbutas
- Web page: https://patentgrep.com/patent/US11909894B2

## CPC

- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 9/40: Network security protocols
- H04L 63/0281: {Proxies}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method and apparatus for generating a dynamic security certificate. The method creates an entropic element from user input, receives metadata from user input and generates a dynamic security certificate using the entropic element and the metadata. The dynamic security certificate is then trusted through user input.

## Claims

### Claim 1

A method for generating a dynamic security certificate comprising:
identifying, from a first user input, at least one sequence of values associated with a user, wherein the first user input comprises data unrelated to an identifying characteristic of the user;
receiving metadata including at least one identifying characteristic of the user;
generating a dynamic security certificate using the at least one sequence of values and the metadata; and
enabling a user, through a second user input, verify that the dynamic security certificate can be trusted; and
using the dynamic security certificate, as generated and trusted, access encrypted user data, via a proxy.

### Claim 2 (depends on 1)

The method of claim 1, wherein the first user input comprises at least one of a characteristic of a device of the user or random data values associated with the user.

### Claim 3 (depends on 2)

The method of claim 2, wherein the characteristic of the device of the user comprises one or more of a user device processor temperature measurement, fan noise, network traffic, data flow between input/output devices, or circuits of the user device.

### Claim 4 (depends on 1)

The method of claim 1, wherein the at least one sequence of values comprises an entropic element and the identifying at least one sequence of values further comprises selecting the entropic element from a list of entropic elements.

### Claim 5 (depends on 1)

The method of claim 1, further comprising using the dynamic security certificate in a man-in-the-middle (MITM) proxy application, which monitors data flowing between a client application and a server application.

### Claim 6 (depends on 5)

The method of claim 5 wherein the MITM proxy application is a portion of an anti-malware application, an anti-virus application, a software debugging application, privacy measurement application or a software testing application.

### Claim 7 (depends on 1)

The method of claim 1, wherein the metadata comprises one or more of a name of a user, user contact information, and user personal information.

### Claim 8 (depends on 1)

The method of claim 1, further comprising creating a private key using the at least one sequence of values.

### Claim 9 (depends on 1)

The method of claim 1, wherein the method is performed upon execution of an MITM proxy application.

### Claim 10 (depends on 1)

The method of claim 1, further comprising receiving an expiration date for the dynamic security certificate from a third user input.

### Claim 11

An apparatus for generating a dynamic security certificate comprising at least one processor coupled to at least one non-transitory computer readable medium having instructions stored thereon, which, when executed by the at least one processor, cause the at least one processor to perform operations comprising:
identifying, from a first input, at least one sequence of values associated with a user, wherein the first user input comprises data unrelated to an identifying characteristic of the user;
receiving metadata including at least one identifying characteristic of the user;
generating a dynamic security certificate using the at least one sequence of values and the metadata; and
enabling a user, through a user input, verify that the dynamic security certificate can be trusted;
wherein the dynamic security certificate, as generated and trusted, is implemented by a proxy to access encrypted user data.

### Claim 12 (depends on 11)

The apparatus of claim 11, wherein the first input comprises at least one of a characteristic of a device of the user or random data values associated with the user.

### Claim 13 (depends on 12)

The apparatus of claim 12, wherein the at least one characteristic of the user device comprises one or more of a user device processor temperature measurement, fan noise, network traffic, data flow between input/output devices, or circuits of the user device.

### Claim 14 (depends on 11)

The apparatus of claim 11 wherein identifying at least one sequence of values further comprises selecting the at least one sequence of values from a list of sequences of values.

### Claim 15 (depends on 11)

The apparatus of claim 11, further comprising using the dynamic security certificate in a man in the middle (MITM) proxy application, which monitors data flowing between a client application and a server application.

### Claim 16 (depends on 15)

The apparatus of claim 15 wherein the MITM proxy application is a portion of an anti-malware application, an anti-virus application, a software debugging application, privacy measurement application or a software testing application.

### Claim 17 (depends on 11)

The apparatus of claim 11, wherein the metadata comprises one or more of a name of a user, user contact information, user personal information.

### Claim 18 (depends on 11)

The apparatus of claim 11, further comprising creating a private key using the at least one sequence of values.

### Claim 19 (depends on 11)

The apparatus of claim 11, wherein the operations are performed upon execution of an MITM proxy application.

### Claim 20 (depends on 11)

The apparatus of claim 11, further comprising receiving an expiration date for the dynamic security certificate from a third user input.
