US 2017/0250978 A1 · Method and system for managing secure custom domains

Abstract

Method, system and infrastructures for managing certificates for platform providers are described. A platform provider provides a platform to host a plurality of virtual sites designated individually with custom specified hostnames. According to one aspect of the present invention, traffic originating from a web browser to a designated website with a hostname is directed to a server (herein “control server”) designed for serving a corresponding certificate to establish a secure session between the browser and the designated website being hosted on a server (herein “platform server”) operated by a platform provider. In operation, the corresponding certificate may be retrieved from a cache in or accessible by the control server, or the control server is caused to generate a certificate based on the access request from the browser after a verification process.

Claims19

Dependent claims

A method for managing a secure session between a terminal and a platform server, the method comprising:

receiving in a control server data traffic of a first access request initiated from an application running in the terminal, the first access request including a hostname of a virtual site, wherein the data traffic is directed to the control server per a directory on a network, and the virtual site is hosted on the platform server operated by a platform provider;
determining an identifier in the directory;
looking up for the platform server corresponding to the identifier;
and
serving a first certificate of the virtual site to the first access request to establish a secure session between the terminal and the control server, when the first certificate is cached locally in the control server;
or
generating a first certificate based on the hostname when the first certificate is not cached locally in the control server;
and
serving the newly generated first certificate to the first access request to establish a secure session between the terminal and the control server.

6 more elements

A control server for managing a secure session between a terminal and an endpoint, the control server comprising:

a network interface to couple the control server to a data network;
an interface to a storage device including a database, wherein the database includes at least a relationship between an identifier and the endpoint;
a processor;
a memory space, coupled to the processor, for storing code, wherein the code is executed by the processor to perform operations of:
receiving data traffic of a first access request initiated from an application running in the terminal, the first access request including a hostname of a virtual site;
determining the identifier in a directory;
looking up for the endpoint corresponding to the identifier;
and
serving a first certificate of the virtual site to the first request access to establish a secure session with the terminal, when the first certificate is cached locally;
or generating a first certificate based on the hostname when the certificate is not cached locally;
and
serving the newly generated first certificate to the first access request to establish a secure session with the terminal.

9 more elements

Dependencies are inferred from the claim text.

Method and system for managing secure custom domains

Life of this patent

Method and system for managing secure custom domains

Life of this patent

Abstract

Claims19