Propagating Keys from Servers to Clients
AssigneeComputer Associates Think, Inc.
InventorPaul A. Gassoway
Life of this patent
Estimating the term…
Abstract
A method for key distribution includes steps or acts of: deprecating a first key on a server; receiving a request from a client wherein the client request includes the deprecated key; verifying the client request by using the deprecated key provided in the client request to decrypt the client request; and sending a communication to the client advising that the first key has been updated. An additional step of sending instructions to the client on obtaining the updated key may also be provided. Additionally, instructions on obtaining the updated key may be sent to the client.
Claims19
A method of key distribution comprising steps of:
- deprecating a first key associated with a server;
- receiving a request from a client wherein the client request comprises the first key;
- verifying the client request;
- and
- sending a communication to the client advising that the first key has been updated.
A method for receiving an updated key, the method comprising steps of:
- transmitting a client request to a server, wherein the client request comprises a deprecated key;
- and
- receiving a communication from the server in response to the client request, the communication advising that the deprecated key has been updated.
A computer readable medium comprising program instructions for causing a processor to:
- deprecate a first key associated with a server;
- receive a request from a client wherein the request comprises the first key;
- verify the client request;
- and
- send a communication to the client advising that the first key has been updated.
An information processing system for distributing an updated key, the system comprising:
- an input/output interface configured for receiving a request from a client, wherein the client request comprises a first key associated with a server;
- a processor configured for performing steps of:
- deprecating the first key;
- verifying the client request by validating the first key;
- and
- notifying the client that the first key has been updated.
Dependencies are inferred from the claim text.