Identity-based certificate management
AssigneeSecureAuth Corporation
InventorsGarret Florian Grajek, Jeffrey Chiwai Lo, Mark V. Lambiase
Life of this patent
Estimating the term…
Abstract
Methods for managing digital certificates, including issuance, validation, and revocation are disclosed. Various embodiments involve querying a directory service with entries that correspond to a particular client identity and have attributes including certificate issuance limits and certificate validity time values. The validity time values are adjustable to revoke selectively the certificates based upon time intervals set forth in validity identifiers included therein.
Claims20
A method comprising:
- as implemented by a computing system, the computing system configured with specific executable instructions,
- receiving a digital certificate revocation request, wherein the digital certificate revocation request comprises a validity time stamp and corresponds to a first client identity, wherein a directory service comprises a first entry corresponding to the first client identity, and wherein the first entry is associated with a validity time value;
- modifying the validity time value in the first entry such that the modified validity time value is the validity time stamp;
- and
- revoking any digital certificate issued to a client system and associated with the first client identity that has a validity start time before the modified validity time value or a validity end time before the modified validity time value.
A system comprising:
- a database comprising a first entry corresponding to a first client identity, wherein the first entry is associated with a validity time value;
- and
- a computing system comprising one or more computing devices, said computing system programmed via executable instructions to at least:
- receive a digital certificate revocation request, wherein the digital certificate revocation request comprises a validity time stamp and corresponds to the first client identity;
- modify the validity time in the first entry such that the modified validity time value is the validity time stamp;
- and
- revoke any digital certificate issued to a client system and associated with the first client identity that has a validity start time before the modified validity time value or a validity end time before the modified validity time value.
A non-transitory computer storage medium that comprises executable instructions that when executed by a computing system, directs the computing system to at least:
- receive a digital certificate revocation request, wherein the digital certificate revocation request comprises a validity time stamp and corresponds to a first client identity, wherein a database comprises a first entry corresponding to the first client identity, and wherein the first entry is associated with a validity time value;
- modify the validity time value in the first entry such that the modified validity time value is the validity time stamp;
- and
- revoke any digital certificate issued to a client system and associated with the first client identity that has a validity start time before the modified validity time value or a validity end time before the modified validity time value.
Dependencies are inferred from the claim text.