Web scale authentication
AssigneeOpenVPN Technologies, Inc.
InventorsFrancis DINHA, James YONAN
Life of this patent
Estimating the term…
Abstract
A system and method for efficient certificate authentication management and distribution of large, web scale authentication information. The method includes receiving at a server, security certificate information, said security certificate including a unique certificate identifier. A structured data source, such as an XML file or database is encoded with a unique record for each possible security certificate using the record ID as the security certificate ID. Each unique record includes a record of four bits or less. Owing to the small size of the data source, large amounts of security certificates may be managed and distributed efficiently over a network to one of more private gateways allowing for large scale certificate authentication.
Claims11
A method including:
- receiving at a server, security certificate information, said security certificate information including a unique certificate identifier;
- encoding in a structured data source, said security certificate information, wherein said encoding includes setting a data source record identifier substantially the same as the certificate identifier, wherein said structured data source includes records 4 bits or less in size, and
- transmitting the structured data source over a network to one or more private gateways,
- wherein the private gateways are operable to query the structured data source to retrieve the security certificate information.
A method including:
- receiving from a network, a structured data source, said data source including security certificate information, said data source encoded with a unique record identifier corresponding to a record of no more than 4 bits;
- receiving an authentication request, said authentication request including a security certificate identifier;
- querying the structured data source by reading the record corresponding to the security certificate identifier, wherein the results of said querying includes authentication information.
A processor readable storage device having non-transitory processor-readable instructions, said instructions operable to direct a processor to perform a method comprising:
- receiving at a server, security certificate information, said security certificate information including a unique certificate identifier;
- encoding in a structured data source, said security certificate information, wherein said encoding includes setting a data source record identifier substantially the same as the certificate identifier, wherein said structured data source includes records 4 bits or less in size, and
- transmitting the structured data source over a network to one or more private gateways,
- wherein the private gateways are operable to query the structured data source to retrieve the security certificate information.
Dependencies are inferred from the claim text.