# US 7,412,599 B1 · Administrative remote notification system and method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 7,412,599 B1 - Document ID: US7412599B1 - Status: Granted - Kind: B1 - Application number: 09/730,547 - Filed: 2000-12-07 - Granted: 2008-08-12 - Earliest claimed: 2000-12-07 - Assignees: Entrust Technologies Limited - Inventors: Karim Nathoo; Tim Bramble; Shan Syed - Web page: https://patentgrep.com/patent/US7412599B1 ## CPC - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Apparatus and method are provided for performing remote notification of records, each having a respective record identifier. A record-user mapping associates with each record identifier a respective one or more user names. For each record upon which remote notification is to be performed the respective one or more user names is obtained from the record-user mapping, and for each obtained user name a respective addressable entity is obtained from a user name-addressable entity mapping. A notification of the record is sent to the addressable entity. Target record processing may also be provided. For each record identifier for which target record processing is to be performed, a target user name is read from the associated record, a respective addressable entity is obtained from the user name-addressable entity mapping, and a notification of the record is sent to the addressable entity. ## Claims ### Claim 1 A method of performing remote notification of records each having a respective record identifier, the method comprising: maintaining a record-user mapping which associates with each of a plurality of record identifiers a respective one or more user names; for each record upon which remote notification is to be performed: a) obtaining the record's record identifier's respective one or more user names from the record-user mapping; b) for each user name in the record's record identifier's respective one or more user names obtaining from a user name-addressable entity mapping a respective addressable entity and sending a notification of the record to the addressable entity. ### Claim 2 (depends on 1) A method according to claim 1 further comprising maintaining the user name-addressable entity mapping from each user name to the respective addressable entity. ### Claim 3 (depends on 2) A method according to claim 2 wherein the user name-addressable entity mapping is a trusted mapping. ### Claim 4 (depends on 1) A method according to claim 1 adapted to perform remote notification of records generated by a certificate management system, wherein obtaining from a user name-addressable entity mapping a respective addressable entity comprises obtaining a respective addressable entity from a respective certificate stored in a repository of published certificates. ### Claim 5 (depends on 4) A method according to claim 4 wherein the certificate management system comprises a PKI (Public Key Infrastructure). ### Claim 6 (depends on 4) A method according to claim 4 further comprising: maintaining the repository of published certificates in which is stored for each of a plurality of user names the respective certificate in which is identified the respective addressable entity. ### Claim 7 (depends on 1) A method according to claim 1 wherein the addressable entity is an E-mail address. ### Claim 8 (depends on 1) A method according to claim 1 wherein each user name is a distinguished name. ### Claim 9 (depends on 4) A method according to claim 4 further comprising for each certificate storing the respective addressable entity in a certificate extension field of the certificate. ### Claim 10 (depends on 9) A method according to claim 9 wherein storing the respective addressable entity in a certificate extension field of the certificate comprises storing the respective addressable entity in a subject alternative name extension. ### Claim 11 (depends on 4) A method according to claim 4 further comprising obtaining a new set of records for processing, and conducting steps a) and b) for each record in the new set of records. ### Claim 12 (depends on 10) A method according to claim 10 further comprising storing record reading parameters which determine circumstances under which the new set of records for processing is to be obtained, and obtaining the new set of records for processing in accordance with the record reading parameters. ### Claim 13 (depends on 1) A method according to claim 1 further comprising protecting each notification message by encryption and/or digital signature. ### Claim 14 (depends on 4) A method according to claim 4 further comprising protecting each notification message by encryption and/or digital signature. ### Claim 15 (depends on 4) A method according to claim 4 further comprising verifying authenticity of the respective certificate before sending the notification to the addressable entity obtained from the respective certificate. ### Claim 16 (depends on 1) A method according to claim 1 further comprising maintaining an identification of a language of choice for each user name, before sending a notification to an addressable entity obtained for a particular user name, determining the particular user name's language of choice and including a translation of text in the notification message into the language of choice. ### Claim 17 (depends on 1) A method according to claim 1 further comprising: identifying at least one record identifier for which target audit record processing is to be performed, the target audit record processing comprising: for each record identifier for which target audit record processing is to be performed reading from the associated record a target user name, obtaining from the user name-addressable entity mapping a respective addressable entity for the target user name and sending a notification of the record to the addressable entity. ### Claim 18 (depends on 4) A method according to claim 4 further comprising: identifying at least one record identifier for which target record processing is to be performed, the target audit record processing comprising: for each record identifier for which target record processing is to be performed reading from the associated record a target user name, obtaining from the repository of published certificates a respective addressable entity for the target user name and sending a notification of the record to the addressable entity. ### Claim 19 A method of performing remote notification of records each having a respective record identifier, the method comprising: identifying at least one record identifier for which target record processing is to be performed, the target audit record processing comprising: for each record identifier for which target record processing is to be performed reading from an associated record a target user name which identifies a user name which was a target of an operation which resulted in the record, obtaining from a user name-addressable entity mapping a respective addressable entity for the target user name and sending a notification of the record to the addressable entity. ### Claim 20 (depends on 19) A method according to claim 19 further comprising maintaining the user name-addressable entity mapping from each user name to the respective addressable entity. ### Claim 21 (depends on 20) A method according to claim 20 wherein the user name-addressable entity mapping is a trusted mapping. ### Claim 22 (depends on 19) A method according to claim 19 adapted to perform remote notification of records generated by a certificate management system, wherein obtaining from a user name-addressable entity mapping a respective addressable entity comprises obtaining the respective addressable entity from a respective certificate stored in a repository of published certificates. ### Claim 23 (depends on 20) A method according to claim 20 wherein the certificate management system comprises a PKI (Public Key Infrastructure). ### Claim 24 (depends on 22) A method according to claim 22 further comprising: collecting a set of records generated by the certificate management system. ### Claim 25 (depends on 22) A method according to claim 22 further comprising: maintaining a repository of published certificates in which is stored for each of a plurality of user names a respective certificate in which is identified a respective addressable entity. ### Claim 26 (depends on 22) A method according to claim 22 wherein the addressable entity is an E-mail address. ### Claim 27 (depends on 22) A method according to claim 22 wherein each user name is a distinguished name. ### Claim 28 (depends on 22) A method according to claim 22 further comprising for each certificate storing the respective addressable entity in a certificate extension of the certificate. ### Claim 29 (depends on 28) A method according to claim 28 wherein storing the respective addressable entity in a certificate extension of the certificate comprises storing the respective addressable entity in a subject alternative name extension. ### Claim 30 (depends on 22) A method according to claim 22 further comprising obtaining a new set of records for processing. ### Claim 31 (depends on 30) A method according to claim 30 further comprising storing record reading parameters which determine circumstances under which the new set of records for processing is to be obtained, and obtaining the new set of records for processing in accordance with the record reading parameters. ### Claim 32 (depends on 19) A method according to claim 19 further comprising protecting each notification message by encryption and/or digital signature. ### Claim 33 (depends on 19) A method according to claim 19 further comprising protecting each notification message by encryption and/or digital signature. ### Claim 34 (depends on 22) A method according to claim 22 further comprising verifying authenticity of the respective certificate before sending the notification to the addressable entity obtained from the respective certificate. ### Claim 35 (depends on 19) A method according to claim 19 further comprising maintaining an identification of a language of choice for each user name, before sending a notification to an addressable entity obtained for a particular user name, determining the particular user name's language of choice and including a translation of text in the notification message into the language of choice. ### Claim 36 An apparatus comprising: a record-user mapping memory structure which associates for each of a plurality of record identifiers a respective one or more user names; a receiving interface for receiving a set of records to be processed for remote notification, each record having a respective record identifier; a notification interface adapted to send messages to addressable entities; a record processing entity adapted to process the set of records by obtaining the record's record identifier's respective one or more user names from the record-user mapping, and for each user name in the record's record identifier's respective one or more user names obtaining from a user name-addressable entity mapping a respective addressable entity and sending a notification of the record to the addressable entity through the notification interface. ### Claim 37 (depends on 36) An apparatus according to claim 36 in combination with the user name-addressable entity mapping from each user name to the respective addressable entity. ### Claim 38 (depends on 36) An apparatus according to claim 36 adapted to perform remote notification of records generated by a certificate management system, wherein the user name-addressable entity mapping is part of a repository of published certificates, and wherein the record processing entity is adapted to obtain the respective addressable entity from a respective certificate stored in the repository of published certificates. ### Claim 39 (depends on 38) An apparatus according to claim 38 wherein the certificate management system comprises a PKI (public key infrastructure). ### Claim 40 (depends on 38) An apparatus according to claim 38 in combination with the repository of published certificates. ### Claim 41 (depends on 38) An apparatus according to claim 38 wherein the addressable entity is an E-mail address, and the notification interface is an E-mail message sending component. ### Claim 42 (depends on 38) An apparatus according to claim 38 further comprising a configuration file adapted to store record reading parameters, wherein the apparatus is adapted to collect through the record receiving interface a new set of records for processing. ### Claim 43 (depends on 36) An apparatus according to claim 36 further comprising: a target record memory structure adapted to contain an identification of at least one record identifier for which target record processing is to be performed; wherein the record processing entity is further adapted to process each record identifier for which target record name processing is to be performed by reading from the associated record a target user name, obtaining from the user name-addressable entity mapping a respective addressable entity for the target user name and sending a notification of the record to the addressable entity. ### Claim 44 (depends on 38) An apparatus according to claim 38 further comprising: a target record memory structure adapted to contain an identification of at least one record identifier for which target record processing is to be performed; wherein the record processing entity is further adapted to process each record identifier for which target record processing is to be performed by reading from the associated record a target user name, obtaining from the repository of published certificates a respective addressable entity for the target user name and sending a notification of the record to the addressable entity. ### Claim 45 An apparatus comprising: a receiving interface for receiving a set of records to be processed for remote notification, each record having a respective record identifier; a notification interface adapted to send message to addressable entities; a target record memory structure adapted to contain an identification of at least one record identifier for which target record processing is to be performed; a record processing entity adapted to process each record in the set of records having a record identifier for which target record name processing is to be performed by reading from the record a target user name, obtaining from a user name-addressable entity mapping a respective addressable entity for the target user name and sending a notification of the record to the addressable entity. ### Claim 46 (depends on 45) An apparatus according to claim 45 wherein the user-name addressable entity mapping comprises a repository of published certificates which contains for each user name a respective addressable entity. ### Claim 47 (depends on 46) An apparatus according to claim 46 in combination with the user name-addressable entity mapping from each user name to the respective addressable entity. ### Claim 48 (depends on 46) An apparatus according to claim 46 adapted to perform remote notification of records generated by a certificate management system. ### Claim 49 (depends on 48) An apparatus according to claim 48 wherein the certificate management system comprises a PKI (Public Key Infrastructure). ### Claim 50 (depends on 46) An apparatus according to claim 46 wherein the addressable entity is an E-mail address, and the notification interface is an E-mail message sending component. ### Claim 51 (depends on 46) An apparatus according to claim 46 further comprising a configuration file adapted to store record reading parameters, wherein the apparatus is adapted to collect through the record receiving interface a new set of records for processing in accordance with the record reading parameters.