Application specific certificate management

Patent metadata

Field	Value
Publication number	US-9654463-B2
Application number	US-201414282034-A
Country	US
Kind code	B2
Filing date	May 20, 2014
Priority date	May 20, 2014
Publication date	May 16, 2017
Grant date	May 16, 2017

Abstract

Application specific certificate deployment may be provided. An application may generate a security certificate comprising a public key and a first private key. The public key may be stored in a shared segment of a memory store, from where it may be retrieved and signed. The signed public key may be re-deployed and/or used to transmit securely encrypted resources.

First claim

What is claimed is:

1. A method comprising:
transmitting a request to generate a security certificate;
determining whether the security certificate has been generated, wherein determining whether the security certificate has been generated comprises determining whether the security certificate has been stored in a memory cache associated with a first application, the memory cache comprising an insecure memory cache accessible by a plurality of applications;
in response to determining that the security certificate has been generated:
retrieving the security certificate,
authenticating the security certificate,
deploying the authenticated security certificate,
encrypting a plurality of resources according to the authenticated security certificate, and
transmitting the encrypted plurality of resources to at least one recipient of the deployed authenticated security certificate;

providing a second key certificate to the first application; and
retrieving a private key certificate from the memory cache, wherein the private key certificate is encrypted according to the second key certificate.

2. The method of claim 1 , wherein the security certificate stored in the memory cache comprises a public key certificate.

3. The method of claim 1 , wherein deploying the authenticated security certificate comprises providing the authenticated security certificate to the first application.

4. The method of claim 1 , wherein the request to generate the security certificate is transmitted in response to receiving a request to access at least one resource.

5. A system comprising:
a memory cache associated with a first application that is insecure and accessible by a plurality of applications; and
a processor, the memory cache and the processor being configured to:
transmit a request to generate a security certificate;
determine whether the security certificate has been generated, wherein determining whether the security certificate has been generated comprises determining whether the security certificate has been stored in the memory cache;
in response to determining that the security certificate has been generated:
retrieve the security certificate,
authenticate the security certificate,
deploy the authenticated security certificate,
encrypt a plurality of resources according to the authenticated security certificate, and
transmit the encrypted plurality of resources to at least one recipient of the deployed authenticated security certificate;

provide a second key certificate to the first application; and
retrieve a private key certificate from the memory cache, wherein the private key certificate is encrypted according to the second key certificate.

6. The system of claim 5 , wherein the security certificate stored in the memory cache comprises a public key certificate.

7. The system of claim 5 , wherein deploying the authenticated security certificate comprises providing the authenticated security certificate to the first application.

8. The system of claim 5 , wherein the request to generate the security certificate is transmitted in response to receiving a request to access at least one resource.

9. A non-transitory computer-readable medium comprising instructions which, when executed by a processor:
transmit a request to generate a security certificate;
determine whether the security certificate has been generated, wherein determining whether the security certificate has been generated comprises determining whether the security certificate has been stored in a memory cache, the memory cache being associated with a first application that is insecure and accessible by a plurality of applications;
in response to determining that the security certificate has been generated:
retrieve the security certificate,
authenticate the security certificate,
deploy the authenticated security certificate,
encrypt a plurality of resources according to the authenticated security certificate, and
transmit the encrypted plurality of resources to at least one recipient of the deployed authenticated security certificate;

provide a second key certificate to the first application; and
retrieve a private key certificate from the memory cache, wherein the private key certificate is encrypted according to the second key certificate.

10. The non-transitory computer-readable medium of claim 9 , wherein the security certificate stored in the memory cache comprises a public key certificate.

11. The non-transitory computer-readable medium of claim 9 , wherein deploying the authenticated security certificate comprises providing the authenticated security certificate to the first application.

12. The non-transitory computer-readable medium of claim 9 , wherein the request to generate the security certificate is transmitted in response to receiving a request to access at least one resource.

Assignees

• Airwatch Llc

Inventors

• Brannon Jonathan Blake

Classifications

• G06F15/16

  Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs {(coordinating program control therefor G06F9/52; in regulating and control system G05B)} · CPC title

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• G06F21/606

  by securing the transmission between two devices or processes · CPC title

• H04L9/0822 Primary

  using key encryption key · CPC title

• H04L9/006

  involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title