# US 2021/0344668 A1 · Renewal of security certificates of supplicants > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0344668 A1 - Document ID: US20210344668A1 - Status: Published application - Kind: A1 - Application number: 17/221,050 - Filed: 2021-04-02 - Published: 2021-11-04 - Earliest claimed: 2020-04-29 - Assignees: Hewlett Packard Enterprise Development LP - Applicants: Hewlett Packard Enterprise Development LP - Inventors: Vikram Limaye; Jason Atkins; Preeti Bhagavan - Web page: https://patentgrep.com/patent/US20210344668A1 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Examples of renewal of security certificates of supplicant devices are described. In an example, a request to authenticate a supplicant device based on a security certificate is received by an authenticator device and from a supplicant device. The request comprises information relating to the security certificate which is expired. A login history of the supplicant device and presence of a valid account associated with the supplicant device in a directory database is determined. An authentication successful message is sent to the supplicant device based on the login history and presence of the valid account in the directory database. The supplicant device is redirected to a captive web portal for authentication of the supplicant device based on the login credential. In response to a successful authentication of the supplicant device in the captive web portal, a renewed security certificate for the supplicant device is provided. ## Claims ### Claim 1 A method for renewal of a security certificate of a supplicant device, the method comprising: receiving, by an authenticator device and from a supplicant device, a request to authenticate the supplicant device based on the security certificate, wherein the request comprises information relating to the security certificate which is expired; determining, by the authenticator device, a login history of the supplicant device and presence of a valid account associated with the supplicant device in a directory database, wherein the valid account has a login credential; sending, by the authenticator device, an authentication successful message to the supplicant device based on the login history and presence of the valid account in the directory database; redirecting, by the authenticator device, the supplicant device to a captive web portal for authentication of the supplicant device based on the login credential; and providing, by the authenticator device, a renewed security certificate for the supplicant device, in response to successful authentication of the supplicant device in the captive web portal. ### Claim 2 (depends on 1) The method as claimed in claim 1, wherein authentication of the login credential in the captive web portal comprises: verifying a username and a password of the valid account associated with the supplicant device; sending a message to an administrator device, wherein the message is indicative of a request for an approval for authentication of the supplicant device; and in response to receiving the approval from the administrator device, onboarding the supplicant device in a network managed by the authenticator device. ### Claim 3 (depends on 1) The method as claimed in claim 1, wherein determining the login history of the supplicant device comprises: identifying a last successful login attempt of the supplicant device in a network managed by the authenticator device; determining whether the last successful login attempt was within a first threshold time period; and determining whether the security certificate has expired within a second threshold time period. ### Claim 4 (depends on 3) The method as claimed in claim 3, wherein the authentication successful message is sent to the supplicant device in response to a determination that the last successful login attempt was within the first threshold time period, the security certificate has expired within the second threshold time period, and the valid account associated with the supplicant device is present in the directory database. ### Claim 5 (depends on 1) The method as claimed in claim 1, wherein providing the renewed security certificate comprises one of: sending the renewed security certificate to the supplicant device; and generating a Uniform Resource Locator (URL) for the renewed security certificate to be downloaded by the supplicant device. ### Claim 6 (depends on 1) The method as claimed in claim 1, wherein the security certificate is one of a Transport Layer Security (TLS) certificate and a Secure Sockets Layer (SSL) certificate. ### Claim 7 (depends on 1) The method as claimed in claim 1, wherein the suppliant device is redirected to the captive web portal based on one of a predefined role, a vendor specific attribute, and a redirect URL. ### Claim 8 An authenticator device comprising: a processor; and a memory coupled to the processor, the memory storing instructions executable by the processor to: receive, from a supplicant device, a request to authenticate the supplicant device based on a security certificate of the supplicant device, wherein the request comprises information relating to the security certificate which is expired; determine a login history of the supplicant device and presence of a valid account associated with the supplicant device in a directory database, wherein the valid account has a login credential; send an authentication successful message to the supplicant device based on the login history and presence of the valid account in the directory database; redirect the supplicant device to a captive web portal for authentication of the supplicant device based on the login credential; and provide a renewed security certificate for the supplicant device, in response to successful authentication of the supplicant device in the captive web portal. ### Claim 9 (depends on 8) The authenticator device as claimed in claim 8, wherein the processor is further to: verify a username and a password of the valid account associated with the supplicant device; send a message to an administrator device, wherein the message is indicative of a request for an approval for authentication of the supplicant device; and in response to receiving the approval from the administrator device, onboard the supplicant device in a network managed by the authenticator device. ### Claim 10 (depends on 8) The authenticator device as claimed in claim 8, wherein the processor is further to: identify a last successful login attempt of the supplicant device in a network managed by the authenticator device; determine whether the last successful login attempt was within a first threshold time period; and determine whether the security certificate has expired within a second threshold time period. ### Claim 11 (depends on 8) The authenticator device as claimed in claim 8, wherein the authentication successful message is sent to the supplicant device in response to a determination that the last successful login attempt was within the first threshold time period, the security certificate has expired within the second threshold time period, and the valid account associated with the supplicant device is present in the directory database. ### Claim 12 (depends on 8) The authenticator device as claimed in claim 8, wherein the processor is further to one of: send the renewed security certificate to the supplicant device; and generate a Uniform Resource Locator (URL) for the renewed security certificate to be downloaded by the supplicant device. ### Claim 13 (depends on 8) The authenticator device as claimed in claim 8, wherein the security certificate is one of a Transport Layer Security (TLS) certificate and a Secure Sockets Layer (SSL) certificate. ### Claim 14 (depends on 8) The authenticator device as claimed in claim 8, wherein the suppliant device is redirected to the captive web portal based on one of a predefined role, a vendor specific attribute, and a redirect URL. ### Claim 15 A non-transitory computer readable medium comprising instructions which, when executed by a processor, causes the processor to: receive, from a supplicant device, a request to authenticate the supplicant device based on a security certificate of the supplicant device, wherein the request comprises information relating to the security certificate which is expired; determine a login history of the supplicant device and presence of a valid account associated with the supplicant device in a directory database, wherein the valid account has a login credential; send an authentication successful message to the supplicant device based on the login history and presence of the valid account in the directory database; redirect the supplicant device to a captive web portal for authentication of the supplicant device based on the login credential; and provide a renewed security certificate for the supplicant device, in response to successful authentication of the supplicant device in the captive web portal. ### Claim 16 (depends on 15) The non-transitory computer readable medium as claimed in claim 15, the instructions further causing the processor to: verify a username and a password of the valid account associated with the supplicant device; send a message to an administrator device, wherein the message is indicative of a request for an approval for authentication of the supplicant device; and in response to receiving the approval from the administrator device, onboard the supplicant device in a network managed by the authenticator device. ### Claim 17 (depends on 15) The non-transitory computer readable medium as claimed in claim 15, the instructions further causing the processor to: identify a last successful login attempt of the supplicant device in a network managed by the authenticator device; determine whether the last successful login attempt was within a first threshold time period; and determine whether the security certificate has expired within a second threshold time period. ### Claim 18 (depends on 15) The non-transitory computer-readable medium as claimed in claim 15, wherein the authentication successful message is sent to the supplicant device in response to a determination that the last successful login attempt was within the first threshold time period; the security certificate has expired within the second threshold time period, and the valid account associated with the supplicant device is present in the directory database. ### Claim 19 (depends on 15) The non-transitory computer readable medium as claimed in claim 15, the instructions further causing the processor to: send the renewed security certificate to the supplicant device; and generate a Uniform Resource Locator (URL) for the renewed security certificate to be downloaded by the supplicant device. ### Claim 20 (depends on 15) The non-transitory computer readable medium as claimed in claim 15, wherein the security certificate is one of a Transport Layer Security (TLS) certificate and a Secure Sockets Layer (SSL) certificate.