# US 2014/0157394 A1 · Authentication system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0157394 A1 - Document ID: US20140157394A1 - Status: Published application - Kind: A1 - Application number: 13/691,949 - Filed: 2012-12-03 - Published: 2014-06-05 - Earliest claimed: 2012-12-03 - Assignees: Verizon Patent and Licensing Inc. - Applicants: Verizon Patent and Licensing Inc. - Inventors: Karmaveer R. KOONJBEARRY; Velamur Srinivasan SUDHARSAN - Web page: https://patentgrep.com/patent/US20140157394A1 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A user device is configured to request a secure web page from a web page server. The user device is further configured to receive a certificate from the web page server, the certificate including a serial number. The user device is further configured to receive different certificates from a plurality of certificate authentication servers. The user device is further configured to compare the different certificates to the certificate received from the web page server; determine that the certificate is valid; and send information to the web page server based on determining that the certificate is valid. ## Claims ### Claim 1 A system comprising: a user device to: request a secure web page from a web page server; receive a certificate from the web page server based on requesting the secure web page, the certificate including a serial number; send the serial number to a plurality of certificate authentication servers; receive different certificates from the plurality of certificate authentication servers based on sending the serial number to the plurality of certificate authentication servers; compare the different certificates to the certificate received from the web page server; determine that the certificate is valid when at least one of the different certificates, from the plurality of certificate authentication servers, matches the certificate received from the web page server; and send information to the web page server based on determining that the certificate is valid. ### Claim 2 (depends on 1) The system of claim 1, where the certificate received from the web page server includes ownership information, and where, when receiving the different certificates from the plurality of certificate authentication servers, the user device is to: receive at least one of the different certificates that includes the ownership information. ### Claim 3 (depends on 1) The system of claim 1, where the certificate received from the web page server includes valid time period information, and where, when receiving the different certificates from the plurality of certificate authentication servers, the user device is to: receive at least one of the different certificates that includes the valid time period information. ### Claim 4 (depends on 1) The system of claim 1, where the certificate received from the web page server further includes at least one of first ownership information, or a first valid time period, and where at least one certificate, of the different certificates, corresponds to a dummy certificate, the dummy certificate including the serial number and at least one of second ownership information or a second valid time period, the second ownership information being different than the first ownership information, and the second valid time period being different than the first valid time period. ### Claim 5 (depends on 1) The system of claim 1, where the user device is further to: create a secret key based determining that the certificate is valid; send the secret key to the web page server; receive a message from the web page server that is encrypted with the secret key; and use the secret key to decrypt the message received from the web page server. ### Claim 6 (depends on 1) The system of claim 1, where, when requesting the secure web page from the web page server, the user device is to: request the secure web page using secure socket layer protocol. ### Claim 7 (depends on 1) The system of claim 1, where the user device is further to: request a second secure web page from a second web page server, the second web page server being different than the web page server; receive a second certificate from the second web page server, based on requesting the second secure web page, the second certificate being associated with a second serial number; send the second serial number to the plurality of certificate authentication servers; receive additional certificates from the plurality of certificate authentication servers, based on sending the second serial number to the plurality of certificate authentication servers; compare the additional certificates with the second certificate; determine that the second certificate is invalid when the additional certificates do not match the second certificate received from the second web page server; and display a warning message based on determining that the second certificate is invalid. ### Claim 8 (depends on 7) The system of claim 7, where the warning message includes an option to continue communication with the second web page server. ### Claim 9 (depends on 7) The system of claim 7, where the user device is further to: terminate communications with the second web page server based on determining that the second certificate is invalid. ### Claim 10 A method comprising: requesting, by a user device, a secure web page from a web page server; receiving, by the user device, a certificate from the web page server based on requesting the secure web page, the certificate including a serial number; sending, by the user device, the serial number to a plurality of certificate authentication servers; receiving, by the user device, different certificates from the plurality of certificate authentication servers based on sending the serial number to each of the plurality of certificate authentication servers; determining, by the user device, that the certificate is valid when at least one of the different certificates, from the plurality of certificate authentication servers, matches the certificate received from the web page server; and sending, by the user device, a message to the web page server based on the certificate being valid. ### Claim 11 (depends on 10) The method of claim 10, where sending the serial number to the plurality of certificate authentication servers includes: sending the serial number to the plurality of certificate authentication servers based on information, stored by the user device, regarding the plurality of certificate authentication servers. ### Claim 12 (depends on 10) The method of claim 10, where receiving the different certificates from the plurality of certificate authentication servers includes: receiving one or more dummy certificates from one or more of the plurality of certificate authentication servers, the one or more dummy certificates having information that does not match information in the certificate received from the web page server. ### Claim 13 (depends on 10) The method of claim 10, where the certificate, received from the web page server, includes an identifier of at least one certificate authentication server of the plurality of certificate authentication servers. ### Claim 14 (depends on 10) The method of claim 10, further comprising: creating a secret key based on determining that the certificate is valid; and sending at least one message, to the web page server, that is encrypted with the secret key. ### Claim 15 A computer-readable medium for storing instructions, the instructions comprising: a plurality of instructions, that when executed by one or more processors of a user device, cause the one or more processors to: request a secure web page from a web page server; receive a certificate from the web page server based on requesting the certificate, the certificate including first information; send the first information to a plurality of certificate authentication servers; receive different certificates from the plurality of certificate authentication servers based on sending the first information to the plurality of certificate authentication servers; compare the different certificates to the certificate received from the web page server; determine that the certificate is valid when at least one of the different certificates, from the plurality of certificate authentication servers, matches the certificate received from the web page server; and send information to the web page server based on determining that the certificate is valid. ### Claim 16 (depends on 15) The computer-readable medium of claim 15, where one or more instructions, of the plurality of instructions, to receive the different certificates from the plurality of certificate authentication servers include or more instructions to: receive at least one dummy certificate, the dummy certificate including the first information and additional information, the additional information being different than information in the certificate received from the web page server. ### Claim 17 (depends on 15) The computer-readable medium of claim 15, where one or more instructions, of the plurality of instructions, to receive the different certificates from the plurality of certificate authentication servers include one or more instructions to: receive at least one of the different certificates that includes valid time period information that matches the valid time period information of the certificate. ### Claim 18 (depends on 15) The computer-readable medium of claim 15, where the plurality of instructions further cause the one or more processors to: create a secret key based on determining that the certificate is valid; and send at least one message, to the web page server, that is encrypted with the secret key. ### Claim 19 (depends on 15) The computer-readable medium of claim 15, where the plurality of instructions further cause the one or more processors to: request a second certificate from a second web page server, the second certificate being different than the certificate received from the web page server, and the second web page server being different than the web page server; receive the second certificate from the second web page server, based on requesting the second certificate, the second certificate including second information; send the second information to the plurality of certificate authentication servers; receive additional certificates from the plurality of certificate authentication servers; compare the additional certificates with the second certificate; determine that the second certificate is invalid when the different certificates from the plurality of certificate authenticate servers do not match the certificate received from the web page server; and display a warning message based on determining that the second certificate is invalid. ### Claim 20 (depends on 19) The computer-readable medium of claim 19, where the plurality of instructions further cause the one or more processors to: terminate communications with the second web page server based on determining that the second certificate is invalid.