Method for setting up secure connections
AssigneeSsh Communications Security Corp.
InventorSamuli Mattila
Life of this patent
Estimating the term…
Abstract
According to the invention, the problem of checking the identity of others is alleviated by creating a mechanism, which allows users to trust and utilize the checking work performed by certain other users, so that every user need not check and confirm the identity of every other user. This can be accomplished by allowing a user who has checked that the identity of a number of other users truly correspond to their certificates, produce a list of these checked certificates, so that other users can import the list of checked certificates into their systems.
Claims19
A method for providing authentication for setting up secure connections between a plurality of network nodes comprising at least the steps of
- placing a collection of accepted certificates comprising at least one accepted certificate available for other nodes by said first node,
- importing said collection by at least one other node than said first node,
- setting up of at least one secure connection by at least one of said at least one other node to a destination node whose certificate was imported as a part of said collection, and automatically accepting the authenticity of said destination node.
A method in a network node for setting up secure connections between the node and other network nodes comprising at least the steps of
- automatically obtaining a certificate of a second node by the network node,
- displaying at least an identification string of said certificate to the user of the network node,
- receiving an indication of acceptance or rejection of trust regarding said certificate from said user, and in the case of receiving an indication of acceptance, storing at least an indication of the acceptance and said certificate,
- setting up a secure connection from the network node to said second node, and
- placing a collection of accepted certificates comprising at least one accepted certificate available for other nodes by the network node.
A method in a network node for setting up secure connections between the node and other network nodes comprising at least the steps of
- importing a collection of accepted certificates from at least one other node,
- setting up of at least one secure connection to a destination node whose certificate was imported as a part of said collection, and automatically accepting the authenticity of said destination node.
A system in a network node for setting up secure connections between network nodes comprising at least
- means for placing a collection of accepted certificates comprising at least one accepted certificate available for other nodes,
- means for importing a collection of accepted certificates from another node,
- means for setting up of at least one secure connection to a destination node, and
- means for automatically accepting the authenticity of a destination node, if the certificate of said destination node was previously imported by said means for importing.
A computer program product for setting up secure connections between network nodes comprising at least
- computer program code means for placing a collection or accepted certificates comprising at least one accepted certificate available for other nodes,
- computer program code means for importing a collection of accepted certificates from another node,
- computer program code means for setting up of at least one secure connection to a destination node, and
- computer program code means for automatically accepting the authenticity of a destination node, if the certificate of said destination node was previously imported by said means for importing.
A computer in a network having network nodes comprising at least
- computer program code means for placing a collection of accepted certificates comprising at least one accepted certificate available for other nodes,
- computer program code means for importing a collection of accepted certificates from another node,
- computer program code means for setting up of at least one secure connection to a destination node, and
- computer program code means for automatically accepting the authenticity of a destination node, if the certificate of said destination node was previously imported by said means for importing.
A method for automatic configuration of a network node, wherein the method comprises at least the steps of
- initiating a negotiation according to a security parameter negotiation protocol with a second network node,
- sending a request for a certificate,
- receiving a certificate,
- terminating said negotiation, and
- determining a connection parameter value based at least in part on information received during said negotiation.
Dependencies are inferred from the claim text.