Pre-authorization of public key infrastructure

An apparatus for pre-authorizing public key infrastructure communication between entities, the apparatus comprising:

• at least one processor;
• and
• a computer readable storage medium having computer readable program code embodied therewith and executable by the at least one processor, the computer readable program code comprising:
• computer readable program code that determines if pre-authorization is required from a remote device to establish a communication channel between a first entity and a second entity;
• computer readable program code that establishes a shared secret value between the first entity and the remote device;
• computer readable program code that receives, at the second entity, from the remote device, proof of pre-authorization, thereby pre-authorizing communication with the first entity, wherein the pre-authorization is based on the shared secret value;
• and
• computer readable program code that stores the proof of pre-authorization for any subsequent communication with the first entity.

A computer program product for pre-authorizing public key infrastructure communication between entities, the computer program product comprising:

• a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
• computer readable program code that determines if pre-authorization is required from a remote device to establish a communication channel between a first entity and a second entity;
• computer readable program code that establishes a shared secret value between the first entity and a remote device;
• computer readable program code that receives, at the second entity, from the remote device, proof of pre-authorization, thereby pre-authorizing communication with the first entity, wherein the pre-authorization is based on the secret value;
• and
• computer readable program code that stores the proof of pre-authorization for any subsequent communication with the first entity.

A method for incorporating pre-authorization into PKI-based pairwise relying-party communications, comprising:

• a first relying-party communicating with a second relying-party to determine whether local possession of proof of pre-authorization at the first relying party is required for successfully establishing a shared secret value with said second relying party;
• said first relying-party establishing a shared secret value with a third-party server for the purpose of acquiring said proof of pre-authorization from said third-party server if said local possession of proof of pre-authorization at the first relying party is required and is not available from accessible storage;
• and
• said first relying-party incorporating said proof of pre-authorization into setup communications regarding said shared secret value with said second relying-party if:
• (i) said local possession of proof of pre-authorization at the first relying party is required and (ii) demonstration of said local possession of proof of pre-authorization at said first relying-party is required by said second relying-party.