Technique for obtaining a single sign-on certificate from a foreign PKI system using an existing strong authentication PKI system
AssigneeNorthrop Grumman Corporation
InventorKenneth W. Aull
Life of this patent
Estimating the term…
Abstract
A method and computer program in which a user (132) may have a digital certificate created using a strong authentication technique. Once the user has the digital certificate he may then request the generation of a “single sign-on” certificate that will allow the user (132) access to a foreign computer networks. This is accomplished by the user (132) contacting a registration web server (124) and requesting the generation of “single sign-on” for the foreign computer network. Thereafter, the registration web server (124) may take a public key generated based on the digital certificate and request the creation of a “single sign-on” by simply creating a public key from the digital certificate.
Claims19
A method of creating a single sign-on role certificate using a PKI system, comprising:
- accessing a PKI system by a user in which a digital signature certificate has been previously created for the user and transmitting the digital signature certificate to the PKI system;
- verifying the identity and validity of the user through the PKI system by accessing a directory using the digital signature certificate;
- generating a private/public key pair and transmitting the public key to the PKI system;
- transmitting the public key to a domain certificate authority for signature;
- and
- returning the public key to the user signed by the domain certificate authority.
A computer program embodied on a computer readable medium and executable by a computer to create a single sign-on role certificate using a PKI system, comprising:
- accessing a PKI system by a user in which a digital signature certificate has been previously created for the user and transmitting the digital signature certificate to the PKI system;
- verifying the identity and validity of the user by PKI system by accessing a directory using the digital signature certificate;
- generating private/public key pair and transmitting the public key to the PKI system;
- transmitting the public key to a domain certificate authority for signature;
- and
- returning the public key to the user signed by the domain certificate authority.
A method of creating a single sign-on role certificate using a PKI system, comprising:
- creating a digital signature certificate verifying the identity of a user and authority of the user to obtain the digital signature certificate;
- delivering a password to the user through the mail to the user's home address;
- accessing a PKI system by the user using the password;
- receiving the digital signature certificate from the PKI system;
- accessing a PKI system by a user using the digital signature certificate;
- verifying the validity of the user by PKI system accessing a directory using the digital signature certificate;
- generating private/public key pair and transmitting the public key to the PKI system;
- transmitting the public key to a domain certificate authority for signature;
- and
- returning the public key to the user signed by the domain certificate authority.
Dependencies are inferred from the claim text.