System and method for multi-certificate pinning
AssigneeJPMorgan Chase Bank, N.A.
InventorsGayathri SUNDAR, Jeffrey HAGUE
Life of this patent
Estimating the term…
Abstract
An embodiment of the present invention is directed to a multi-certificate pinning. The innovative system configures servers with at least two certificates from multiple different vendors/sources with differing expiration dates. This provides lead time to replace voided/expired certificates. If a first certificate expires, the system uses another valid certificate for that server until the certificated is addressed, thereby avoiding service down times. Accordingly, providers are not required to expedite mobile app store submission.
Claims20
A mobile device that implements multi-certificate pinning, the mobile device comprising:
- a memory component;
- a network communication interface that is in communication with a remote server;
- and
- a microprocessor, coupled to the memory component and the network communication interface, the microprocessor configured to perform the steps of:
- requesting a first certificate and a second certificate from the remote server, wherein the first certificate has a first expiration and the second certificate has a second expiration different from the first expiration;
- executing an application on the mobile device by using the first certificate to make a connection to the server;
- and
- prior to or upon an expiration of the first certificate, switching to the second certificate wherein the application now uses the second certificate to make the connection to the remote server.
A mobile device that implements multi-certificate pinning, the mobile device comprising:
- a memory component;
- a network communication interface that is in communication with a remote server;
- and
- a microprocessor, coupled to the memory component and the network communication interface, the microprocessor configured to perform the steps of:
- requesting a first certificate;
- receiving a second certificate in advance of an expiration of the first certificate;
- updating at least one application executing on the mobile device to contain the first certificate and the second certificate;
- receiving a third certificate in advance of the expiration of the first certificate;
- and
- upon expiration of the first certificate;
- updating the at least one application executing on the mobile device to contain the second certificate and the third certificate.
A method that implements multi-certificate pinning, the method comprising the steps of:
- requesting a first certificate and a second certificate from a remote server, wherein the first certificate has a first expiration and the second certificate has a second expiration different from the first expiration;
- executing an application on a mobile device by using the first certificate to make a connection to a server;
- and
- prior to or upon an expiration of the first certificate, switching to the second certificate wherein the application now uses the second certificate to make the connection to the remote server.
Dependencies are inferred from the claim text.