US6134327A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for creating communities of trust in a secure communication system
Assignee: Entrust Ltd
•
Filing: 1997-10-24
•
Granted: 2000-10-17
•
Expires: 2017-10-24
Abstract
Abstract A method and apparatus for creating communities of trust within a secure communications system is accomplished by allowing end-users to obtain arbitrary lists of trusted public keys from other end-users and from associated authorities. Once an arbitrary list has been obtained by an end-user, the end-user determines whether it was obtained in a manner consistent with a security policy of the secured community. The security policy may enable an end-user to receive trusted public keys from other end-users, from associated authorities only, to receive public keys of associated authorities, other end users, or any combination thereof. When the arbitrary lists of trusted keys are obtained in a manner consistent with the security policy, the end-user adds keys of the arbitrary lists to a trusted key list. When a security-related operation is to be performed (e.g., verifying a signature of a received message or retrieving the encryption public key of a recipient for an outgoing message), any of the trusted keys contained within the trusted list may be used for authentication purposes.
Inventors
- 👤 Paul C. Van Oorschot
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 20:44
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0272; G; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G06F21/57; G06F21/60; G06F21/64; H04L63/04; H04L63/0428; H04L63/0442; H04L63/08; H04L63/0823; H04L63/10; H04L63/104; H04L9/00; H04L9/32; H04L9/3263; G06F2221/00; G06F2221/21; G06F2221/2117; G06F2221/2145; H04L2463/00; H04L2463/102
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
105 words
A computing device comprising: a processing unit; and memory operably coupled to the processing unit, wherein the memory stores programming instructions that, when read by the processing unit, causes the processing unit to: (a) obtain an arbitrary list of trusted public key certificates; (b) determine whether the arbitrary list of the trusted public key certificates was obtained in a manner consistent with a security policy of a secure community; and (c) add trusted public key certificates of the arbitrary list to a trusted public key list when the arbitrary list of trusted public key certificates was obtained in a manner consistent with a security policy.
Claim 2
Dependent Claim
105 words
A computing device comprising: a processing unit; and memory operably coupled to the processing unit, wherein the memory stores programming instructions that, when read by the processing unit, causes the processing unit to: (a) obtain an arbitrary list of trusted public key certificates; (b) determine whether the arbitrary list of the trusted public key certificates was obtained in a manner consistent with a security policy of a secure community; and (c) add trusted public key certificates of the arbitrary list to a trusted public key list when the arbitrary list of trusted public key certificates was obtained in a manner consistent with a security policy.
Claim 3
Dependent Claim
48 words
The computing device of claim 1 further comprises, within the memory, programming instructions that, when read by the processing unit, causes the processing unit to: obtain the arbitrary list which includes at least one public key certificate of at least one of an associated authority and an end-user.
Claim 4
Dependent Claim
33 words
The computing device of claim 2 further comprises, within the memory, programming instructions that, when read by the processing unit, causes the processing unit to obtain the public key certificate from another end-user.
Claim 5
Dependent Claim
34 words
The computing device of claim 2 further comprises, within the memory, programming instructions that, when read by the processing unit, causes the processing unit to obtain the public key certificate from an associated authority.
Claim 6
Dependent Claim
81 words
The computing device of claim 2 further comprises, within the memory, programming instructions that, when read by the processing unit, causes the processing unit to maintain a record indicating whether a certificate contained in the trusted public key list was obtained by importing an end-user certificate from the another end-user, importing the end-user certificate from an associated authority, importing an associated authority public key certificate from the another end-user, or importing the associated authority public key certificate from the associated authority.
Claim 7
Dependent Claim
75 words
The computing device of claim 1 further comprises, within the memory, programming instructions that, when read by the processing unit, causes the processing unit to: receive a request to perform a security related operation; determine whether an associated public key certificate of the security related operation is verified as authentic; and perform the security related operation using a subject public key of the associated public key certificate when the associated public key certificate is authentic.
Claim 8
Dependent Claim
73 words
The computing device of claim 6 further comprises, within the memory, programming instructions that, when read by the processing unit, causes the processing unit to: determine whether the associated public key certificate substantially matches a public key certificate stored in the trusted public key list; flag the associated public key certificate as being verified when the associated public key certificate substantially matches a public key certificate stored in the trusted public key list.
Claim 9
Dependent Claim
105 words
The computing device of claim 6 further comprises, within the memory, programming instructions that, when read by the processing unit, causes the processing unit to determine that the manner of obtaining is consistent with the security policy when the arbitrary list is received via at least one of: importing the arbitrary list from another end-user, importing the arbitrary list from an associated authority, importing a certificate of an end-user from another end-user, importing a certificate of an associated authority from the another end-user, importing the certificate of the associated authority from the associated authority, and importing the certificate of the end-user from the associated authority.
Claim 10
Dependent Claim
152 words
A digital storage medium that stores programming instructions that, when read by a processing unit, causes the processing unit to create communities of trust, the digital storage medium comprises: first means for storing programming instructions that, when read by the processing unit, causes the processing unit to obtain an arbitrary list of trusted public key certificates; second means for storing programming instructions that, when read by the processing unit, causes the processing unit to determine whether the arbitrary list of the trusted public key certificates was obtained in a manner consistent with a security policy of a secure community; and third means for storing programming instructions that, when read by the processing unit, causes the processing unit to add trusted public key certificates of the arbitrary list to a trusted public key list when the arbitrary list of trusted public key certificates was obtained in a manner consistent with a security policy.
Claim 11
Dependent Claim
152 words
A digital storage medium that stores programming instructions that, when read by a processing unit, causes the processing unit to create communities of trust, the digital storage medium comprises: first means for storing programming instructions that, when read by the processing unit, causes the processing unit to obtain an arbitrary list of trusted public key certificates; second means for storing programming instructions that, when read by the processing unit, causes the processing unit to determine whether the arbitrary list of the trusted public key certificates was obtained in a manner consistent with a security policy of a secure community; and third means for storing programming instructions that, when read by the processing unit, causes the processing unit to add trusted public key certificates of the arbitrary list to a trusted public key list when the arbitrary list of trusted public key certificates was obtained in a manner consistent with a security policy.
Claim 12
Dependent Claim
49 words
The digital storage medium of claim 9 further comprises means for storing programming instructions that, when read by the processing unit, causes the processing unit to: obtain the arbitrary list which includes at least one public key certificate of at least one of an associated authority and an end-user.
Claim 13
Dependent Claim
37 words
The digital storage medium of claim 10 further comprises means for storing programming instructions that, when read by the processing unit, causes the processing unit to obtain the at least one public key certificate from another end-user.
Claim 14
Dependent Claim
38 words
The digital storage medium of claim 10 further comprises means for storing programming instructions that, when read by the processing unit, causes the processing unit to obtain the at least one public key certificate from an associated authority.
Claim 15
Dependent Claim
86 words
The digital storage medium of claim 10 further comprises means for storing programming instructions that, when read by the processing unit, causes the processing unit to provide feedback as to maintain a record indicating whether a certificate contained in the trusted public key list was obtained by importing an end-user certificate from the another end-user, importing the end-user certificate from an associated authority, importing an associated authority public key certificate from the another end-user, or importing the associated authority public key certificate from the associated authority.
Claim 16
Dependent Claim
76 words
The digital storage medium of claim 9 further comprises means for storing programming instructions that, when read by the processing unit, causes the processing unit to: receive a request to perform a security related operation; determine whether an associated public key certificate of the security related operation is verified as authentic; and perform the security related operation using a subject public key of the associated public key certificate when the associated public key certificate is authentic.
Claim 17
Dependent Claim
71 words
The digital storage medium of claim 14 further comprises programming instructions that, when read by the processing unit, causes the processing unit to: determine whether the associated public key certificate substantially matches a public key certificate stored in the trusted public key list; flag the associated public key certificate as being verified when the associated public key certificate substantially matches a public key certificate stored in the trusted public key list.
Claim 18
Dependent Claim
103 words
The digital storage medium of claim 9 further comprises programming instructions that, when read by the processing unit, causes the processing unit to determine that the manner of obtaining is consistent with the security policy when the arbitrary list is received via at least one of: importing the arbitrary list from another end-user, importing the arbitrary list from an associated authority, importing a certificate of an end-user from another end-user, importing a certificate of an associated authority from the another end-user, importing the certificate of the associated authority from the associated authority and importing the certificate of the end-user from the associated authority.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-10-17 | 2004-04-17 | 2004-10-17 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-10-17 | 2008-04-17 | 2008-10-17 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-10-17 | 2012-04-17 | 2012-10-17 | $7700.00 | Window Closed / Lapsed |