US6233341B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for installing and using a temporary certificate at a remote site
Assignee: FB COMMERCIAL FINANCE Inc
•
Filing: 1998-05-19
•
Granted: 2001-05-15
•
Expires: 2018-05-19
Abstract
Abstract A system installs and enables the use of a temporary certificate at a remote site. The system comprises a global server site, a temporary client site and a web site. The global server site includes a security module that identifies and authenticates the user at the temporary client site, and a web server engine that downloads a key generation downloadable and a certificate request engine downloadable upon user authentication to the client site. The client site includes a web engine that executes the key generation downloadable to generate a public key and a private key, and executes the certificate request engine downloadable to send the a temporary certificate request (including the public key) to the global server site. A temporary certificate generator at the global server site generates a temporary certificate having the public key and a validity period. The web server on the global server site sends the temporary certificate and a certificate installation downloadable to the web engine on the client site, which executes the downloadable thereby installing the temporary certificate. The web server on the global server site can also send a certificate maintenance downloadable and a certificate de-installation downloadable to the client site. The web server engine maintains a revocation list that contains information identifying revoked temporary certificates, so that a revoked but thusfar unexpired certificate cannot be improperly used. The web site reviews the temporary certificate for authenticity and contacts the global server site to review the revocation list and determine whether the temporary certificate has been revoked.
Inventors
- 👤 Mark D. Riggins
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 22:49
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/06; H04L63/08; H04L63/0823; H04L9/00; H04L9/32; H04L9/3263
Claims Analysis
Total Claims: 53
Claim 1
Independent Claim
69 words
A computer-based method for installing a temporary certificate on a client site, comprising the steps of: receiving a public key from a client site; generating a temporary certificate containing the public key and a validity period; and delivering the temporary certificate and a certificate installation downloadable to the client site, thereby enabling installing of the certificate on the client site without requiring network transfer of a client private key.
Claim 2
Dependent Claim
69 words
A computer-based method for installing a temporary certificate on a client site, comprising the steps of: receiving a public key from a client site; generating a temporary certificate containing the public key and a validity period; and delivering the temporary certificate and a certificate installation downloadable to the client site, thereby enabling installing of the certificate on the client site without requiring network transfer of a client private key.
Claim 3
Dependent Claim
12 words
The method of claim 1 , wherein the client site is unconfigured.
Claim 4
Dependent Claim
27 words
The method of claim 1 , wherein the certificate installation downloadable includes code for causing the client site to install the temporary certificate in a web engine.
Claim 5
Dependent Claim
22 words
The method of claim 3 , wherein the certificate installation downloadable includes an application program interface for communicating with the web engine.
Claim 6
Dependent Claim
25 words
The method of claim 1 , further comprising the step of identifying and authenticating the user at the client site before generating the temporary certificate.
Claim 7
Dependent Claim
24 words
The method of claim 1 , further comprising the step of establishing a secure channel with the client site before downloading the temporary certificate.
Claim 8
Dependent Claim
35 words
The method of claim 1 , further comprising the step of forwarding to the client site a key generation downloadable for causing the client site to generate the public key and an associated private key.
Claim 9
Dependent Claim
17 words
The method of claim 7 , further comprising the step of receiving a validity period duration request.
Claim 10
Dependent Claim
15 words
The method of claim 8 , wherein the temporary certificate is a self-certified limited certificate.
Claim 11
Dependent Claim
16 words
The method of claim 8 , further comprising the step of digitally signing the temporary certificate.
Claim 12
Dependent Claim
33 words
The method of claim 1 , further comprising the step of forwarding to the client a certificate maintenance downloadable for causing the client site to monitor the validity period of the temporary certificate.
Claim 13
Dependent Claim
23 words
The method of claim 11 , wherein the certificate maintenance downloadable further enables the client site to update the temporary certificate before expiration.
Claim 14
Dependent Claim
30 words
The method of claim 1 , further comprising the step of downloading a certificate de-installation downloadable for causing the client site to de-install the temporary certificate from the client site.
Claim 15
Dependent Claim
21 words
The method of claim 13 , wherein the de-installation downloadable stores information identifying an unexpired temporary certificate in a revocation list.
Claim 16
Independent Claim
82 words
A system for installing a temporary certificate in a client site, comprising: a server for receiving a public key from a client site; a temporary certificate generator coupled to the server for generating a temporary certificate containing the public key and a validity period; and a certificate installation downloadable coupled to the server for causing the client site to install the temporary certificate, thereby enabling installing of the certificate in the client site without requiring network transfer of a client private key.
Claim 17
Independent Claim
82 words
A system for installing a temporary certificate in a client site, comprising: a server for receiving a public key from a client site; a temporary certificate generator coupled to the server for generating a temporary certificate containing the public key and a validity period; and a certificate installation downloadable coupled to the server for causing the client site to install the temporary certificate, thereby enabling installing of the certificate in the client site without requiring network transfer of a client private key.
Claim 18
Dependent Claim
12 words
The system of claim 15 , wherein the client site is unconfigured.
Claim 19
Dependent Claim
24 words
The system of claim 15 , wherein the certificate installation downloadable enables the client site to install the temporary certificate in a web engine.
Claim 20
Dependent Claim
22 words
The system of claim 17 , wherein the certificate installation downloadable includes an application program interface for communicating with the web engine.
Claim 21
Dependent Claim
25 words
The system of claim 15 , further comprising a security module coupled to the server for identifying and authenticating the user at the client site.
Claim 22
Dependent Claim
18 words
The system of claim 15 , wherein the server generates a secure communications channel with the client site.
Claim 23
Dependent Claim
26 words
The system of claim 15 , further comprising a key generation downloadable for causing the client site to generate the public key and a private key.
Claim 24
Dependent Claim
31 words
The system of claim 21 , wherein the temporary certificate generator receives a validity period duration request from the client site and uses the duration request to determine the validity period.
Claim 25
Dependent Claim
16 words
The system of claim 22 , wherein the temporary certificate generator digitally signs the temporary certificate.
Claim 26
Dependent Claim
30 words
The system of claim 23 , wherein the server includes a server private key, and the temporary certificate generator uses the server private key to digitally sign the temporary certificate.
Claim 27
Dependent Claim
30 words
The system of claim 15 , further comprising a certificate maintenance downloadable coupled to the server for causing the client site to monitor the validity window of the temporary certificate.
Claim 28
Dependent Claim
27 words
The system of claim 25 , wherein the certificate maintenance downloadable coupled to the server further enables the client site to update the temporary certificate before expiration.
Claim 29
Dependent Claim
30 words
The system of claim 15 , further comprising a certificate de-installation downloadable coupled to the server for causing the client site to de-install the temporary certificate from the client site.
Claim 30
Dependent Claim
21 words
The system of claim 27 , wherein the de-installation downloadable stores information identifying an unexpired temporary certificate in a revocation list.
Claim 31
Dependent Claim
70 words
A computer-readable storage medium storing program code for causing a computer to perform the steps of: receiving a public key from a client site; generating a temporary certificate containing the public key and a validity period; and delivering the temporary certificate and a certificate installation downloadable to the client site, thereby enabling installation of the certificate at the client site without requiring network transfer of a client site private key.
Claim 32
Dependent Claim
70 words
A computer-readable storage medium storing program code for causing a computer to perform the steps of: receiving a public key from a client site; generating a temporary certificate containing the public key and a validity period; and delivering the temporary certificate and a certificate installation downloadable to the client site, thereby enabling installation of the certificate at the client site without requiring network transfer of a client site private key.
Claim 33
Independent Claim
104 words
A method for installing a temporary certificate in a web engine, comprising the steps of: generating a public key and a private key; sending the public key to a certificate authority; providing identification and authentication information to the certificate authority; if identified and authenticated, receiving a certificate installation downloadable and a temporary certificate having a short validity period from the certificate authority; and using the certificate installation downloadable to install the temporary certificate and the private key in the web engine, thereby enabling installing of the certificate at a client site corresponding to the web engine without requiring network transfer of the private key.
Claim 34
Independent Claim
104 words
A method for installing a temporary certificate in a web engine, comprising the steps of: generating a public key and a private key; sending the public key to a certificate authority; providing identification and authentication information to the certificate authority; if identified and authenticated, receiving a certificate installation downloadable and a temporary certificate having a short validity period from the certificate authority; and using the certificate installation downloadable to install the temporary certificate and the private key in the web engine, thereby enabling installing of the certificate at a client site corresponding to the web engine without requiring network transfer of the private key.
Claim 35
Dependent Claim
13 words
The method of claim 30 , wherein the web engine is currently unconfigured.
Claim 36
Dependent Claim
21 words
The method of claim 30 , further comprising the step of sending a temporary certificate duration request to the certificate authority.
Claim 37
Dependent Claim
18 words
The method of claim 32 , wherein the validity period is based on the temporary certificate duration request.
Claim 38
Independent Claim
110 words
A system for installing a temporary certificate on an unconfigured web engine, comprising: a key generation module for generating a public and private key pair; a certificate request module for transmitting the pubic key to a certificate authority; a certificate installation module for installing a temporary certificate having a short validity period and the private key in an unconfigured web engine, thereby creating a temporarily configured web engine; and a certificate maintenance module for monitoring the short validity period to determine if the temporary certificate has expired, thereby enabling installing of the certificate at a client site corresponding to the web engine without requiring network transfer of the private key.
Claim 39
Independent Claim
110 words
A system for installing a temporary certificate on an unconfigured web engine, comprising: a key generation module for generating a public and private key pair; a certificate request module for transmitting the pubic key to a certificate authority; a certificate installation module for installing a temporary certificate having a short validity period and the private key in an unconfigured web engine, thereby creating a temporarily configured web engine; and a certificate maintenance module for monitoring the short validity period to determine if the temporary certificate has expired, thereby enabling installing of the certificate at a client site corresponding to the web engine without requiring network transfer of the private key.
Claim 40
Dependent Claim
17 words
The system of claim 34 , wherein one of the modules is part of the web engine.
Claim 41
Dependent Claim
17 words
The system of claim 34 , wherein one of the modules was downloaded from a remote computer.
Claim 42
Dependent Claim
16 words
The system of claim 34 , wherein one of the modules is a stand-alone application program.
Claim 43
Dependent Claim
19 words
The system of claim 34 , further comprising a certificate de-installation module for de-installing the temporary certificate upon expiration.
Claim 44
Dependent Claim
22 words
The system of claim 34 , wherein the certificate maintenance module enables re-issuing the temporary certificate with a new short validity period.
Claim 45
Dependent Claim
28 words
The system of claim 34 , wherein the certificate request module sends a request which includes the public key and identification and authentication information to the certificate authority.
Claim 46
Independent Claim
81 words
A method of generating a self-certified temporary certificate, comprising the steps of: receiving a temporary public key and user-identification information from a remote client; retrieving a long-term public key certificate and a long-term private key from memory; packaging the temporary public key, the user-identification information, a validity period and the long-term public certificate into a package; and using the long-term private key to sign the package, thereby generating a self-certified temporary certificate without requiring network transfer of the long-term private key.
Claim 47
Independent Claim
81 words
A method of generating a self-certified temporary certificate, comprising the steps of: receiving a temporary public key and user-identification information from a remote client; retrieving a long-term public key certificate and a long-term private key from memory; packaging the temporary public key, the user-identification information, a validity period and the long-term public certificate into a package; and using the long-term private key to sign the package, thereby generating a self-certified temporary certificate without requiring network transfer of the long-term private key.
Claim 48
Independent Claim
129 words
A method of examining a self-certified temporary certificate, comprising the steps of: receiving a self-certified temporary certificate, which includes a signature, a validity period, a temporary public key, and a long-term public certificate containing a long-term public key and signed by a certificate authority private key associated with a certificate authority; using a well-known public key associated with the certificate authority private key to verify the certificate authority signing the long-term certificate; using the long-term public key to verify the signature of the temporary certificate, and thus to verify the client; and enabling access to services during the validity period if the certificate authority and the temporary certificate have been verified, thereby enabling examining of the certificate of the client without requiring network transfer of a client private key.
Claim 49
Independent Claim
129 words
A method of examining a self-certified temporary certificate, comprising the steps of: receiving a self-certified temporary certificate, which includes a signature, a validity period, a temporary public key, and a long-term public certificate containing a long-term public key and signed by a certificate authority private key associated with a certificate authority; using a well-known public key associated with the certificate authority private key to verify the certificate authority signing the long-term certificate; using the long-term public key to verify the signature of the temporary certificate, and thus to verify the client; and enabling access to services during the validity period if the certificate authority and the temporary certificate have been verified, thereby enabling examining of the certificate of the client without requiring network transfer of a client private key.
Claim 50
Independent Claim
99 words
A method of installing a temporary certificate, comprising the steps of: generating a public and private key pair; receiving a user-selected certificate duration request; packaging the public key and the user-selected certificate duration request into a certificate generation request; sending the certificate generation request to a certificate authority; receiving a temporary certificate containing the public key and a limited validity period based on the user-selected temporary certificate duration request; installing the temporary certificate and the private key in a web engine, thereby enabling installing of the certificate at the client without requiring network transfer of the client private key.
Claim 51
Independent Claim
99 words
A method of installing a temporary certificate, comprising the steps of: generating a public and private key pair; receiving a user-selected certificate duration request; packaging the public key and the user-selected certificate duration request into a certificate generation request; sending the certificate generation request to a certificate authority; receiving a temporary certificate containing the public key and a limited validity period based on the user-selected temporary certificate duration request; installing the temporary certificate and the private key in a web engine, thereby enabling installing of the certificate at the client without requiring network transfer of the client private key.
Claim 52
Independent Claim
86 words
A method of generating a temporary certificate, comprising the steps of: receiving a certificate generation request containing a public key and a user-selected certificate duration request from a remote client; packaging the public key and a certificate validity period based on the user-selected certificate duration request into a package; signing the package, thereby generating a temporary certificate; and transmitting the temporary certificate to the remote client, thereby enabling generating of the certificate of the remote client without requiring network transfer of a remote client private key.
Claim 53
Independent Claim
86 words
A method of generating a temporary certificate, comprising the steps of: receiving a certificate generation request containing a public key and a user-selected certificate duration request from a remote client; packaging the public key and a certificate validity period based on the user-selected certificate duration request into a package; signing the package, thereby generating a temporary certificate; and transmitting the temporary certificate to the remote client, thereby enabling generating of the certificate of the remote client without requiring network transfer of a remote client private key.
References Cited (Backward Citations)
US4652698A
Cited
US4831582A
Cited
US4897781A
Cited
US5048085A
Cited
US5263157A
Cited
US5220603A
Cited
US5778346A
Cited
US5666553A
Cited
US5701423A
Cited
US5644354A
Cited
US5666530A
Cited
US5581749A
Cited
US5491752A
Cited
US5434918A
Cited
US5799086A
Cited
US5420927A
Cited
US5420927B1
Cited
US5787172A
Cited
US5495533A
Cited
US5544322A
Cited
US5623601A
Cited
US5715403A
Cited
US5613012A
Cited
US5627658A
Cited
US5684990A
Cited
US5682478A
Cited
US5784464A
Cited
US5682524A
Cited
US5657390A
Cited
US5721779A
Cited
US5647002A
Cited
US5706427A
Cited
US5757916A
Cited
US5572643A
Cited
CA2191505A1
Cited
US5706502A
Cited
EP0801478A2
Cited
US5828840A
Cited
US5784463A
Cited
US5982898A
Cited
US5999947A
Cited
CA2210763A1
Cited
US5951652A
Cited
US5870544A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-05-14 | 2004-11-13 | 2005-05-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-05-14 | 2008-11-13 | 2009-05-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-05-14 | 2012-11-13 | 2013-05-15 | $7700.00 | Window Closed / Lapsed |