Systems and methodologies for certificate validation
OwnerArwa Alrawais, Abdulrahman Alhothailyinventors
Life of this patent
Estimating the term…
Abstract
A system and method for certificate validation. The method includes acquiring revocation information associated with one or more revoked certificates from a plurality of certificate authorities, signing the revocation information, and storing the signed revocation information. Further, the method includes receiving a request from a client to connect to a web server. In response to the request, certificate information from the web server is received. The method further includes comparing the certificate information with stored revocation information and terminating a connection between the web server and the client when the certificate information matches a revoked certificate information included in the stored revocation information.
Claims17
A method for certificate validation, the method comprising:
- acquiring, via a collector server with processing circuitry, revocation information associated with one or more revoked certificates from a plurality of certificate authorities;
- signing, via the processing circuitry, the revocation information;
- sending, via the processing circuitry, the signed revocation information to at least one proxy server;
- storing, in memory associated with a proxy server, the signed revocation information;
- receiving, at the proxy server, a request from a client device to connect to a web server;
- receiving, at the proxy server, certificate information associated with a certificate of the web server in response to receiving the request;
- comparing, via processing circuitry associated with the proxy server, the certificate information with stored revocation information;
- and
- terminating, via the processing circuitry associated with the proxy server, a connection between the web server and the client device when the certificate information matches revoked certificate information included in the stored revocation information.
A system for certificate validation, the system comprising:
- a collector server configured to
- receive revocation information associated with one or more revoked certificates from a plurality of certificate authorities,
- sign the revocation information, and
- send the signed revocation information to at least one proxy server;
- and
- a proxy server configured to
- receive the signed revocation information from the collector server,
- store the signed revocation information,
- receive a request from a client device to connect to a web server,
- receive certificate information associated with a certificate of the web server in response to receiving the request,
- compare the certificate information with stored revocation information, and
- terminate a connection between the web server and the client device when the certificate information matches revoked certificate information included in the stored revocation information.
A non-transitory computer readable medium storing computer-readable instructions therein which when executed by a computer cause the computer to perform a method for certificate validation, the method comprising:
- acquiring revocation information associated with one or more revoked certificates from a plurality of certificate authorities;
- signing the revocation information;
- sending the signed revocation information to at least one proxy server;
- storing the signed revocation information;
- receiving a request from a client device to connect to a web server;
- receiving certificate information associated with the web server in response to the request;
- comparing the certificate information with the stored revocation information;
- and
- terminating a connection between the client device and the web server when the certificate information matches revoked certificate information included in the stored revocation information.
Dependencies are inferred from the claim text.