US 2016/0365983 A1Published application

Code signing system with machine to machine interaction

AssigneeARRIS Enterprises LLC

InventorsReshma T. Shahabuddin, Ting Yao, Tat Keung Chan, Alexander Medvinsky, Xin Qiu

Life of this patent

Estimating the term…

Loading patent…

Abstract

A code signing system operating a web portal for user clients and a web service for automated machine clients. The web service can receive an operation request from a code signing module running on a remote machine client, the operation request including a request for a cryptographic operation and user credentials retrieved from a hardware cryptographic token connected to the machine client. The code signing system can perform the requested cryptographic operation and return a result to the machine client if the code signing system authenticates the machine client and the requested cryptographic operation is within a permissions set associated with the machine client.

Claims17

Dependent claims

A code signing system, comprising:

a frontend server operating a web service configured to exchange data automatically over a network with a code signing module running on a remote machine client, and a web portal configured to exchange data over said network with a manually operated user client;
and
a backend server in data communication with said frontend server, said backend server being in data communication with a permissions database, said permissions database storing permission sets associated with authorized users,
wherein said frontend server is configured to receive an operation request from said code signing module that comprises a request for a cryptographic operation and user credentials retrieved by said code signing module from a hardware cryptographic token connected to said machine client,
wherein said frontend server is configured to authenticate said machine client as an authorized user based at least in part on the user credentials received from said code signing module, and
wherein said backend server is configured to perform the cryptographic operation requested in said operation request and return a result of the cryptographic operation to said machine client via said frontend server when said frontend server authenticates said machine client as an authorized user and the cryptographic operation is within a permission set associated with said machine client in said permissions database.

3 more elements

A method of performing remotely requested cryptographic operations, comprising:

providing a code signing system comprising a frontend server and a backend server, wherein said frontend server runs a web portal configured to exchange data with manually operated user clients and a web service configured to exchange data automatically with remote machine clients;
receiving an operation request at said web service from a code signing module running on a remote machine client, said operation request comprising a request for a cryptographic operation;
receiving a digital certificate at said web service from said code signing module, said digital certificate comprising an IP address associated with said machine client;
authorizing said machine client as an authorized user based at least in part by verifying that said digital certificate does not appear on a certificate revocation list;
passing said IP address from said frontend server to said backend server and retrieving a permissions set associated with said IP address from a permissions database at said backend server;
performing said cryptographic operation at said backend server when said cryptographic operation is within said permissions set;
returning a result of said cryptographic operation from said backend server to said frontend server;
and
returning said result from said frontend server to said code signing module via said web service.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/179,624Filed 10 Jun 2016
Priority: 10 Jun 2015
Published: 15 Dec 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 9/3249
Involving digital signatures: using RSA or related signature schemes, e.g. Rabin scheme
G06F 16/9535
Querying, e.g. by the use of web search engines: search customisation based on user profiles and personalisation
G06F 21/57
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: certifying or…
G06F 21/645
Protecting data integrity, e.g. using checksums, certificates or signatures: using a third party

Family

Application62/173,604Us provisional application · filed 10 Jun 2015
Application62/173,616Us provisional application · filed 10 Jun 2015
US 10,284,376 B2Related patent
US 2016/0365983 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key