Policy-based security certificate filtering

Details Policy-based security certificate filtering Policy-based security certificate filtering

2011-07-19

2011-07-19

Arani, Taghi T (Department: 2438)

Information security

Policy

C726S010000, C713S155000, C713S156000, C713S157000, C713S158000

Reexamination Certificate

active

07984479

ABSTRACT:
Policy filtering services are built into security processing of an execution environment for resolving how to handle a digital security certificate of a communicating entity without requiring a local copy of a root certificate that is associated with the entity through a certificate authority (“CA”) chain. Policy may be specified using a set of rules (or other policy format) indicating conditions for certificate filtering. This filtering is preferably invoked during handshaking, upon determining that a needed root CA certificate is not available. In one approach, the policy uses rules specifying conditions under which a certificate is permitted (i.e., treated as if it is validated) and other rules specifying conditions under which a certificate is blocked (i.e., treated as if it is invalid). Preferably, policy rules are evaluated and enforced in order of most-specific to least-specific.

REFERENCES:
patent: 6353886 (2002-03-01), Howard et al.
patent: 2002/0010785 (2002-01-01), Katsukawa et al.
patent: 2002/0069200 (2002-06-01), Cooper et al.
patent: 2002/0144110 (2002-10-01), Ramanathan
patent: 2003/0097592 (2003-05-01), Adusumilli
patent: 2003/0110374 (2003-06-01), Yamamoto et al.
patent: 2004/0049687 (2004-03-01), Orsini et al.
patent: 2004/0243805 (2004-12-01), Enokida
patent: 2004/0268148 (2004-12-01), Karjala et al.
patent: 2005/0033957 (2005-02-01), Enokida
patent: 2005/0091484 (2005-04-01), Thornton et al.
patent: 2005/0138351 (2005-06-01), Lee et al.
patent: 2005/0257058 (2005-11-01), Yoshida et al.
patent: 2007/0118874 (2007-05-01), Adams et al.
patent: 2010/0083347 (2010-04-01), Hinton
patent: WO 03/026200 (2003-03-01), None
Automatic updating of trusted root authorities , Jan. 21, 2005, p. 1, Publisher: Microsoft Corporation. <http://technet2.microsoft.com/WindowsServer/en/Library/e539554e-d478-4b8b-9fa4-cd12c476c98f1033.mspx>.Printed on Apr. 6, 2006.
Certificate autoenrollment, Jan. 21, 2005, p. 1, Publisher: Microsoft Corporation <http://technet2.microsoft.com/WindowsServer/en/Library/34d3ea27-8cef-4db8-a008-7b1e5f2df3ac1033.mspx>. Printed on Apr. 6, 2006.
Certificates and Authentication, Jan. 21, 2005, p. 1, Publisher: Microsoft Corporation <http://technet2.microsoft.com/WindowsServer/en/Library/25f7ac34-6045-4c3c-b7f3-bf78d6207f711033.mspx>. Printed on Apr. 6, 2006.
Certificate Services example implementation: Establishing autoenrollment for user certificates, Jan. 21, 2005, p. 3, Publisher: Microsoft Corporation <http://technet2.microsoft.com/WindowsServer/en/Library/e69746a2-81d9-43d0-9d82-93b5760bea361033.mspx>. Printed on Apr. 6, 2006.
Certificate stores, Jan. 21, 2005, p. 3, Publisher: Microsoft Corporation <http://technet2.microsoft.com/WindowsServer/en/Library/1c4d3c02-e996-450a-bf4f-9a12d245a7eb1033.mspx>. Printed on Apr. 6, 2006.
Managing trust of third-party certification authorities, Jan. 21, 2005, p. 1, Publisher: Microsoft Corporation <http://technet2.microsoft.com/WindowsServer/en/Library/93a36907-dcf1-4012-afdf-5c64ab840cff1033.mspx>. Printed on Apr. 6, 2006.
Managing trust of user-selected certification authorities, Jan. 21, 2005, p. 1, Publisher: Microsoft Corporation. <http://technet2.microsoft.com/WindowsServer/en/Library/9839177b-7d23-459f-b7f8-62a78c9846bc1033.mspx>.Printed on Apr. 6, 2006.

Affiliated with

Also associated with

Rating

Policy-based security certificate filtering does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Policy-based security certificate filtering, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Policy-based security certificate filtering will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2626484