US6035402A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Virtual certificate authority
Assignee: GTE CyberTrust Solutions Inc
•
Filing: 1996-12-20
•
Granted: 2000-03-07
•
Expires: 2016-12-20
Abstract
Abstract A method and system for creating and administering certificates digitally signed by a trusted entity (certificate authority) to ensure that certificated transactions are authenticated as that of a particular entity. Requests for a certificate, along with verification information, are directed to the certificate authority, where they are held and accessed by an entity having verification responsibilities (registration authority) and approved or disapproved.
Inventors
- 👤 J. Stuart Vaeth
- 👤 Charles S. Walton
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 09:59
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0823; H04L9/00; H04L9/32; H04L9/321; H04L9/3263
Claims Analysis
Total Claims: 12
Claim 1
Independent Claim
185 words
Apparatus for certifying a transaction comprising: an interface to a network, said network interface comprising a firewall system; a storage device; an application processor adapted for accepting from said network interface a request for issuance of a certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request for access to said certificate issuance request written on said storage device, for reading said certificate issuance request from said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the generation of a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; a web server processor connected, along with said application processor, to said firewall system; each processor being a redundant pair of processors; and said storage device comprising portions to which data is written redundantly and independently.
Claim 2
Dependent Claim
185 words
Apparatus for certifying a transaction comprising: an interface to a network, said network interface comprising a firewall system; a storage device; an application processor adapted for accepting from said network interface a request for issuance of a certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request for access to said certificate issuance request written on said storage device, for reading said certificate issuance request from said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the generation of a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; a web server processor connected, along with said application processor, to said firewall system; each processor being a redundant pair of processors; and said storage device comprising portions to which data is written redundantly and independently.
Claim 3
Dependent Claim
164 words
Apparatus for certifying a transaction comprising: an interface to a network; a storage device; an application processor adapted for accepting from said network interface a request for issuance of a certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request for access to said certificate issuance request written on said storage device, for reading said certificate issuance request from said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the generation of a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; and a standalone processor, electrically isolated from said network interface and said application processor, for generating a higher-level certificate for said apparatus.
Claim 4
Dependent Claim
164 words
Apparatus for certifying a transaction comprising: an interface to a network; a storage device; an application processor adapted for accepting from said network interface a request for issuance of a certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request for access to said certificate issuance request written on said storage device, for reading said certificate issuance request from said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the generation of a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; and a standalone processor, electrically isolated from said network interface and said application processor, for generating a higher-level certificate for said apparatus.
Claim 5
Dependent Claim
205 words
Apparatus for certifying a transaction comprising: an interface to a network; a storage device; an application processor adapted for accepting from said network interface a request for issuance of a certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request for access to said certificate issuance request written on said storage device, for reading said certificate issuance request from said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the generation of a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; a standalone processor, electrically isolated from said network interface and said application processor, for generating a higher-level certificate for said apparatus; a first cryptographic card reader communicating with said application processor for generation of said requested certificate using a secure cryptographic card; and a second cryptographic card reader communicating with said standalone processor for generating said higher-level certificate using said secure cryptographic card.
Claim 6
Dependent Claim
205 words
Apparatus for certifying a transaction comprising: an interface to a network; a storage device; an application processor adapted for accepting from said network interface a request for issuance of a certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request for access to said certificate issuance request written on said storage device, for reading said certificate issuance request from said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the generation of a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; a standalone processor, electrically isolated from said network interface and said application processor, for generating a higher-level certificate for said apparatus; a first cryptographic card reader communicating with said application processor for generation of said requested certificate using a secure cryptographic card; and a second cryptographic card reader communicating with said standalone processor for generating said higher-level certificate using said secure cryptographic card.
Claim 7
Dependent Claim
199 words
Apparatus for issuing a plurality of types of certificates for a transaction comprising: an interface to a network; a storage device; a plurality of cryptographic processors each associated with a type of certificate; an application processor adapted for accepting from said network interface a request for issuance of a type of certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request associated with said type of certificate for access to said certificate issuance request written on said storage device, for reading said certificate issuance request form said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the cryptographic processor associated with said type of certificate to generate a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; each processor being a redundant pair of processors; and said storage device comprising portions to which data is written redundantly and independently.
Claim 8
Dependent Claim
199 words
Apparatus for issuing a plurality of types of certificates for a transaction comprising: an interface to a network; a storage device; a plurality of cryptographic processors each associated with a type of certificate; an application processor adapted for accepting from said network interface a request for issuance of a type of certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request associated with said type of certificate for access to said certificate issuance request written on said storage device, for reading said certificate issuance request form said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the cryptographic processor associated with said type of certificate to generate a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; each processor being a redundant pair of processors; and said storage device comprising portions to which data is written redundantly and independently.
Claim 9
Dependent Claim
223 words
Apparatus for issuing a plurality of types of certificates for a transaction comprising: an interface to a network; a storage device; a plurality of cryptographic processors each associated with a type of certificate; an application processor adapted for accepting from said network interface a request for issuance of a type of certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request associated with said type of certificate for access to said certificate issuance request written on said storage device, for reading said certificate issuance request form said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the cryptographic processor associated with said type of certificate to generate a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; each processors being a redundant pair of processors; said storage device comprising portions to which data is written redundantly and independently; and a standalone processor, electrically isolated from said network interface and said application processor, for generating higher-level certificates for said plurality of types of certificates.
Claim 10
Dependent Claim
223 words
Apparatus for issuing a plurality of types of certificates for a transaction comprising: an interface to a network; a storage device; a plurality of cryptographic processors each associated with a type of certificate; an application processor adapted for accepting from said network interface a request for issuance of a type of certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request associated with said type of certificate for access to said certificate issuance request written on said storage device, for reading said certificate issuance request form said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the cryptographic processor associated with said type of certificate to generate a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; each processors being a redundant pair of processors; said storage device comprising portions to which data is written redundantly and independently; and a standalone processor, electrically isolated from said network interface and said application processor, for generating higher-level certificates for said plurality of types of certificates.
Claim 11
Dependent Claim
276 words
Apparatus for issuing a plurality of types of certificates for a transaction comprising: an interface to a network; a storage device; a plurality of cryptographic processors each associated with a type of certificate; an application processor adapted for accepting from said network interface a request for issuance of a type of certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request associated with said type of certificate for access to said certificate issuance request written on said storage device, for reading said certificate issuance request form said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the cryptographic processor associated with said type of certificate to generate a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; each processor being a redundant pair of processors; said storage device comprising portions to which data is written redundantly and independently; a standalone processor, electrically isolated from said network interface and said application processor, for generating higher-level certificates for said plurality of types of certificates; said plurality of cryptographic processors comprising a first cryptographic card reader communicating with said application processor for generation of said requested certificate using a corresponding plurality of secure cryptographic cards; and a second cryptographic card reader communicating with said standalone processor for generating said higher-level certificates using said corresponding plurality of secure cryptographic cards.
Claim 12
Dependent Claim
276 words
Apparatus for issuing a plurality of types of certificates for a transaction comprising: an interface to a network; a storage device; a plurality of cryptographic processors each associated with a type of certificate; an application processor adapted for accepting from said network interface a request for issuance of a type of certificate, for writing said certificate issuance request to said storage device, for accepting from said network interface a request associated with said type of certificate for access to said certificate issuance request written on said storage device, for reading said certificate issuance request form said storage device, for communicating to said network interface for transmission to the source of said request for access to said certificate issuance request, for accepting from said network interface an approval of said certificate issuance request, for directing the cryptographic processor associated with said type of certificate to generate a certificate in accordance with said certificate issuance request and said approval, and for communicating to said network interface for transmission to the source of said certificate issuance request said generated certificate; each processor being a redundant pair of processors; said storage device comprising portions to which data is written redundantly and independently; a standalone processor, electrically isolated from said network interface and said application processor, for generating higher-level certificates for said plurality of types of certificates; said plurality of cryptographic processors comprising a first cryptographic card reader communicating with said application processor for generation of said requested certificate using a corresponding plurality of secure cryptographic cards; and a second cryptographic card reader communicating with said standalone processor for generating said higher-level certificates using said corresponding plurality of secure cryptographic cards.
References Cited (Backward Citations)
US5214702A
Cited
US5481720A
Cited
US5590199A
Cited
US5455953A
Cited
US5825300A
Cited
US5878144A
Cited
US5790785A
Cited
US5774552A
Cited
US5745574A
Cited
US5684951A
Cited
US5864620A
Cited
US5717757A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-03-07 | 2003-09-06 | 2004-03-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-03-07 | 2007-09-06 | 2008-03-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-03-07 | 2011-09-06 | 2012-03-07 | $7700.00 | Window Closed / Lapsed |