# US 2014/0195800 A1 · Certificate Information Verification System

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0195800 A1
- Document ID: US20140195800A1
- Status: Published application
- Kind: A1
- Application number: 13/737,451
- Filed: 2013-01-09
- Published: 2014-07-10
- Earliest claimed: 2013-01-09
- Assignees: DigiCert, Inc.
- Inventors: Jason Allen Sabin; Richard Jeremy Rowley
- Web page: https://patentgrep.com/patent/US20140195800A1

## CPC

- G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures
- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- G06F 21/645: {using a third party}
- H04L 63/10: {for controlling access to devices or network resources}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The invention discloses a system and apparatus for detecting problematic certificate action requests and digital certificates. Ideally, the invention will be used to detect a certificate request that will result in security problems and detect issued certificates that lack essential information. The invention uses a proxy system that intercepts certificate requests and transmitted certificates. The proxy system runs a series of checks on the intercepted request and/or certificate. The checks vary depending on the certificate contents, requester, and system providing the request or certificate.

## Claims

### Claim 1

A method for checking certificate requests comprising:
Receiving a request for a certificate action,
Performing at least one check on the request, and
Taking an action based on the results of the at least one check.

### Claim 2 (depends on 1)

A method according to claim 1 where the certificate action is to generate a new certificate.

### Claim 3 (depends on 1)

A method according to claim 1 where the request is received by a proxy system before it is received by a certificate services system.

### Claim 4 (depends on 1)

A method according to claim 1 where the at least one check is part of a verification package.

### Claim 5 (depends on 1)

A method according to claim 1 where the at least one check is selected based on the certificate request.

### Claim 6 (depends on 1)

A method according to claim 1 where a verification controller performs the at least one check on the request.

### Claim 7 (depends on 1)

A method according to claim 1 where an ADP determines the action taken based on the results of the at least one check.

### Claim 8 (depends on 1)

A method according to claim 1 further comprising storing the results of the at least one check in a database.

### Claim 9 (depends on 1)

A method according to claim 1 further comprising providing notice of the results of the at least one check.

### Claim 10

A method for checking certificate information comprising:
Receiving a certificate,
Retrieving at least one check from a verification package,
Performing at least one check on the certificate, and
Taking an action based on the results of the at least one check.

### Claim 11 (depends on 1)

A method according to claim 1 where the at least one check comprises checking the certificate key size.

### Claim 12 (depends on 1)

A method according to claim 1 where the at least one check comprises checking the certificate contents against a certificate profile.

### Claim 13 (depends on 1)

A method according to claim 1 where the at least one check is selected based on the type of certificate.

### Claim 14 (depends on 1)

A method according to claim 1 where a verification controller performs the at least one check on the certificate.

### Claim 15 (depends on 1)

A method according to claim 1 further comprising storing the results of the check in a database.

### Claim 16 (depends on 1)

A method according to claim 1 further comprising notifying at least one person about the results of the check.

### Claim 17

A system for checking certificate information comprising:
A server running software designed to receive certificates,
A verification controller that performs at least one check on the received certificate, and
A notification system.

### Claim 18 (depends on 17)

A system according to claim 17, further comprising a ADP that takes an action based on the results of the check performed by the verification controller.

### Claim 19 (depends on 17)

A system according to claim 17, further comprising a verification package that contains the at least one check.

### Claim 20 (depends on 17)

A system according to claim 17, further comprising an auditing system.