# US 12,224,997 B2 · Multi-way trust formation in a distributed system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,224,997 B2 - Document ID: US12224997B2 - Status: Granted - Kind: B2 - Application number: 17/420,156 - Filed: 2019-03-04 - Published: 2022-03-03 - Granted: 2025-02-11 - Earliest claimed: 2019-03-04 - Assignees: Hitachi Vantara, Ltd. - Applicants: Hitachi Vantara LLC - Inventors: Andrew Todd; Walter Wohler; Marty Kulma; Richard Bramante - Web page: https://patentgrep.com/patent/US12224997B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - G06F 21/33: using certificates - G06F 21/606: {by securing the transmission between two devices or processes} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 12/069: using certificates or pre-shared keys - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract In some examples, a first computing device associated with a first site may receive a certificate of a second computing device associated with a second site that is different from the first site. The first computing device may send, to the second computing device, a credential of a user associated with the second site. In addition, the first computing device may send to the second computing device, a certificate of the first computing device. Furthermore, based at least on authentication of the credential of the user by the second computing device, trusted communications may be established between the first computing device and the second computing device. ## Claims ### Claim 1 A system comprising: a first system including a plurality of first computing devices located at a first site, the first system in communication with a shared identity provider system that maintains user credential information for at least users of the first system and a second system, the second system including a plurality of second computing devices located at a second site that is different from the first site, at least one first computing device of the plurality of first computing devices in the first system including one or more processors configured by executable instructions to perform operations comprising: receiving, by the at least one first computing device, a certificate of the second system including the plurality of second computing a devices located at the second site that is different from the first site, the certificate of the second system including a public cryptographic key of the second system and an identity of the second system; in response to receiving the certificate of the second system, sending, by the at least one first computing device, to the second system, the certificate of the second system; in response to sending the certificate of the second system to the second system, receiving, from the second system a response signed with the certificate of the second system indicating that the first system can trust communications from the second system; obtaining, by the at least one first computing device, from the shared identity provider system, a credential of a user of the second system; in response to receiving the response signed with the certificate of the second system indicating that the first system can trust the second system, sending, by the at least one first computing device, the credential of the user of the second system to the second system, the second system redirecting the credential to the shared identity provider system for authentication, wherein the authentication indicates that the second system can trust communications from the first system; sending, by the at least one first computing device, to the second system, a certificate of the first system, the certificate of the first system including a public cryptographic key of the first system and an identity of the first system, wherein, based at least on the at least one first computing device receiving the response signed with the certificate of the second system, and further based on authentication of the credential of the user of the second system, trusted communications are established between the first system and the second system. ### Claim 2 (depends on 1) The system as recited in claim 1, wherein the second system has already established trusted communications with a third system comprising a plurality of third computing devices located at a third site that is different from the first site and the second site, the operations further comprising: receiving, from the second system, based on the trusted communications established between the first system and the second system, a certificate of the third system; and using, by the first system, the certificate of the third system for trusted communications with the third system. ### Claim 3 (depends on 2) The system as recited in claim 2, wherein the second system provides the certificate of the first system to the third system based on the trusted communications established between the first system and the second system, and the trusted communications already established between the second system and the third system. ### Claim 4 (depends on 2) The system as recited in claim 2, the operations further comprising: receiving a revocation of the certificate of the first system; obtaining a new certificate of the first system; re-establishing trusted communications with the second system; and sending the new certificate to the second system, wherein the second system provides the new certificate to the third system. ### Claim 5 (depends on 2) The system as recited in claim 2, wherein the shared identity provider system is further shared with the third system and maintains user credential information for users of the third system. ### Claim 6 (depends on 1) The system as recited in claim 1, further comprising, prior to receiving the certificate of the second system, initiating a transport layer security protocol connection with the second system to receive the certificate of the second system. ### Claim 7 (depends on 1) The system as recited in claim 1, the operations further comprising: sending the certificate of the second system to a user device for acceptance of the certificate of the second system; and receiving, from the user device, an acknowledgement indicating an acceptance of the certificate of the second system. ### Claim 8 (depends on 1) The system as recited in claim 1, wherein the credential of the user of the second system is a username and password of an administrator having authorized access to both the first system and the second system. ### Claim 9 (depends on 1) The system as recited in claim 1, wherein the public cryptographic key of the certificate of the first system corresponds to a private cryptographic key maintained by the first system. ### Claim 10 (depends on 1) The system as recited in claim 1, further comprising establishing, by the first system, trust in communications received from the second system based at least in part on receiving the response signed with the certificate of the second system; and sending the credential of the user to the second system based at least on the trust established by the first system based at least in part on receiving the response signed with the certificate of the second system. ### Claim 11 (depends on 10) The system as recited in claim 10, further comprising establishing the trusted communications between the first system and the second system based on the first system trusting communications from the second system based at least on receiving the response signed with the security certificate of the second system, and based on authentication of the credential of the second user by the shared identity provider system and receipt, by the second system, of the certificate of the first system. ### Claim 12 A method comprising: receiving, by a first computing device of a plurality of first computing devices included in a first system and located at a first site, a certificate of a second system, the second system comprising a plurality of second computing devices located at a second site that is different from the first site, the certificate of the second system including a public cryptographic key of the second system and an identity of the second system, wherein the first system and the second system are in communication with a shared identity provider system that maintains user credential information for at least users of the first system and the second system; in response to receiving the certificate of the second system, sending, by the first computing device, to the second system, the certificate of the second system; in response to sending the certificate of the second system to the second system, receiving, by the first computing device, from the second system, a response signed with the certificate of the second system indicating that the first system can trust communications from the second system; obtaining, by the first computing device, from the shared identity provider system, a credential of a user of the second system; in response to receiving the response signed with the certificate of the second system, sending, by the first computing device, to the second system, the credential of the user of the second system, the second system redirecting the credential to the shared identity provider system for authentication, wherein the authentication indicates that the second system can trust communications from the first system; and sending, by the first computing device, to the second system, a certificate of the first system, a certificate of the first system including a public cryptographic key of the first system and an identity of the first system, wherein, based at least on the first computing device receiving the response signed with the certificate of the second system, and further based on authentication of the credential of the user of the second system, trusted communications are established between the first system and the second system. ### Claim 13 (depends on 12) The method as recited in claim 12, wherein the second system has already established trusted communications with a third system including a plurality of third computing devices located at a third site, the method further comprising: receiving, from the second system, based on the trusted communications established between the first system and the second system, a certificate of the third system; and using, by the first system, the certificate of the third system for trusted communications with the third system. ### Claim 14 (depends on 13) The method as recited in claim 13, wherein the second system provides the certificate of the first system to the third system based on the trusted communications established between the first system and the second system, and the trusted communications already established between the second system and the third system. ### Claim 15 (depends on 12) The method as recited in claim 12, further comprising, prior to receiving the certificate of the second system, initiating, by the first computing device, a transport layer security protocol connection with the second system to receive the certificate of the second system. ### Claim 16 (depends on 12) The method as recited in claim 12, wherein the credential of the user of the second system is a username and password of an administrator having authorized access to both the first system and the second system. ### Claim 17 One or more non-transitory computer-readable media storing instructions that, when executed by a first computing device of a plurality of computing devices included in a first system and located at a first site, configure the first computing device to perform operations comprising: receiving, by the first computing device, a certificate of a second system, the second system comprising a plurality of second computing devices located at a second site that is different from the first site, the certificate of the second system including a public cryptographic key of the second system and an identity of the second system, wherein the first system and the second system are in communication with a shared identity provider system that maintains user credential information for at least users of the first system and the second system; in response to receiving the certificate of the second system, sending, by the first computing device, to the second system, the certificate of the second system; in response to sending the certificate of the second system to the second system, receiving, by the first computing device, from the second system, a response signed with the certificate of the second system indicating that the first system can trust communications from the second system; obtaining, by the first computing device, from the shared identity provider system, a credential of a user of the second system; in response to receiving the response signed with the certificate of the second system, the credential of the user of the second system, the second system redirecting the credential to the shared identity provider system for authentication, wherein the authentication indicates that the second system can trust communications from the first system; and sending, by the first computing device, to the second system a certificate of the first system, the certificate of the first system including a public cryptographic key of the first system and an identity of the first system, wherein, based at least on the first system receiving the response signed with the certificate of the second system, and further based on authentication of the credential of the user of the second system, trusted communications are established between the first system and the second system. ### Claim 18 (depends on 17) The one or more non-transitory computer-readable media as recited in claim 17, wherein the second system has already established trusted communications with a third system including a plurality of third computing devices located at a third site, the operations further comprising: receiving, from the second system, based on the trusted communications established between the first system and the second system, a certificate of the third system; and using, by the first system, the certificate of the third system for trusted communications with the third system. ### Claim 19 (depends on 18) The one or more non-transitory computer-readable media as recited in claim 18, wherein the second system provides the certificate of the first system to the third system based on the trusted communications established between the first system and the second system, and the trusted communications already established between the second system and the third system. ### Claim 20 (depends on 17) The one or more non-transitory computer-readable media as recited in claim 17, wherein the credential of the user of the second system is a username and password of an administrator having authorized access to both the first system and the second system.