Systems and methods for securing interconnecting directories

A non-transitory computer-readable storage medium comprising executable instructions, which when executed by at least one processor in deploying keys in connection with proxy resolution, cause the at least one processor to:

• distribute a root certificate signed by a certificate authority and an intermediate certificate, which is signed by a root private key associated with the root certificate, the root certificate having a longer life to expiration than the intermediate certificate;
• receive, from a participant, a signing request for a participant certificate, the participant certificate including a participant public key, the participant certificate having a shorter life to expiration than the intermediate certificate;
• assess the signing request for the participant certificate, based on ordering of content in the signing request;
• sign the participant certificate with an intermediate public key included in the intermediate certificate;
• and
• disseminate the signed participant certificate to the participant and at least one other participant, whereby the at least one other participant trusts a request from the participant, which is signed by a private key of the participant, based on the participant certificate including the public key validating the signed request and the participant certificate being signed by the intermediate public key, which is dependent on the root certificate;
• receive a message from the participant;
• and
• encrypt data, based on the participant certificate of the participant, prior to providing the encrypted data to the participant in response to the message.

A computer-implemented method comprising:

• distributing, by a service core computing device, a root certificate signed by a certificate authority and an intermediate certificate, which is signed by a root private key associated with the root certificate, the root certificate having a longer life to expiration than the intermediate certificate;
• receiving, from a participant, a signing request for a participant certificate, the participant certificate including a participant public key, the participant certificate having a shorter life to expiration than the intermediate certificate;
• assessing, by the service core computing device, the signing request for the participant certificate, based on ordering of content in the signing request;
• signing, by the service core computing device, the participant certificate with an intermediate public key included in the intermediate certificate;
• disseminating the signed participant certificate to the participant and at least one other participant, whereby the at least one other participant trusts a request from the participant, which is signed by a private key of the participant, based on the participant certificate including the public key validating the signed request and the participant certificate being signed by the intermediate public key, which is dependent on the root certificate;
• receiving, by a computing device of a second participant, a message from the participant;
• and
• encrypting data, by the computing device of the second participant, based on the participant certificate of the participant, prior to providing the encrypted data to the participant in response to the message.