US 2014/0244998 A1 · SECURE PUBLISHING OF PUBLIC-KEY CERTIFICATES

Abstract

The current document is directed to methods and systems for secure provisioning, publication, distribution, and utilization of public-key certificates. These methods and systems employ domain name system (“DNS”) servers implementing the DNS security extensions (“DNSSEC servers”), a publisher component, and additional client-side and server-side functionalities. Public-key certificates provided by the DNSSEC servers engender a high degree of trust, as their integrity is protected and can be readily authenticated by the cryptographic-digital-signature based chains of trust provided by the DNSSEC. The systems to which the current document is directed employ DNSSEC servers, a publisher component, and additional client-side and server-side functionalities, and are referred to as “Public-key certificate Distribution and Management Systems” (“CDMSs”).

Claims17

Dependent claims

A public-key-certificate publishing system comprising:

a client-side publisher component, executed on one or more processors of a client computer system stored in an electronic memory within the client computer system, that, in response to a client-computer-system event, transmits a public-key-certificate-related request to a remote publisher service;
and
the publisher service implemented as a hardware appliance or executed on a computer system, such as a DNSSEC server, that includes one or more processors and an electronic memory, the publisher service receiving the public-key-certificate-related request from the client-side publisher component, storing the public-key-certificate-related request in the electronic memory, and executing the public-key-certificate-related request by:
creating at least one DNSSEC request, and
transmitting the at least one DNSSEC request to a DNSSEC server for execution by the DNSSEC server.

2 more elements

A public-key-certificate publishing system comprising:

a publisher service implemented as a hardware appliance or executed on a computer system, such as a DNSSEC server, that includes one or more processors and an electronic memory and that receives a public-key-certificate-related request, stores the public-key-certificate-related request in the electronic memory, and executes the public-key-certificate-related request by:
creating at least one DNSSEC request, and
transmitting the at least one DNSSEC request to a DNSSEC server for execution by the DNSSEC server.

Dependencies are inferred from the claim text.

Secure publishing of public-key certificates

Life of this patent

Secure publishing of public-key certificates

Life of this patent

Abstract

Claims17