Certificate status delivery through a local endpoint

a certificate status and local endpoint technology, applied in the field of computer security, can solve the problems of browser application experiencing substantial delays in receiving an ocsp response, delays may occur in the network of the user's internet service provider (isp), the ca, or in any of the routers,

Inactive Publication Date: 2015-06-04
DIGICERT
View PDF7 Cites 29 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Benefits of technology

[0008]Other embodiments include, without limitation, a computer-readable medium that includes instructions that enable a processing unit to implement one or more asp...

Problems solved by technology

In some cases, the browser application may experience substantial delays in receiving an OCSP response.
For instance, delays may occur within the network of the user's Internet Service Provider (ISP), the ISP of the CA, or in any of the routers or networks of the Internet between the ISPs o...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Certificate status delivery through a local endpoint
  • Certificate status delivery through a local endpoint
  • Certificate status delivery through a local endpoint

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0017]Embodiments presented herein provide techniques for delivering validity messages for digital certificates through a local application on a client computer. More specifically, the techniques disclosed herein deliver certificate validity messages, such as online certificate status protocol (OCSP) responses or certificate revocation lists (CRLs), to a requesting client (e.g., a web browser application) via a push model using local software that monitors other running applications and intercepts system calls made by the running applications. Using this push model, the client machine may cache certificate validity messages before the status of a corresponding certificate is requested.

[0018]For example, an antivirus (AV) application may be configured to cache OCSP responses as well as intercept OCSP requests. In addition to maintaining malware definitions, the AV application may be configured to also receive OCSP responses sent by a certificate authority (CA). The AV application sto...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

Techniques are disclosed for locally distributing online certificate status protocol (OCSP) responses to a client computer. A certificate authority (CA) proactively sends OCSP responses to an agent application (e.g., an antivirus application configured to handle OCSP responses) residing in the client computer. The agent application stores the OCSP responses in a cache. Thereafter, when a browser application sends an OCSP request to the CA, the agent application intercepts the request and determines whether a corresponding OCSP response is locally cached. If so, the agent application sends the cached OCSP response to the browser application. If not, the agent application retrieves the corresponding OCSP response from the CA and sends the response to the browser application.

Description

BACKGROUND[0001]1. Field[0002]Embodiments of the invention generally relate to techniques for computer security. More specifically, techniques are disclosed for efficiently sending online certificate status protocol responses to relying parties (e.g., client browser applications) by distributing the responses to the relying parties locally.[0003]2. Description of the Related Art[0004]Various techniques exist for determining the validity of a digital certificate. For example, online certificate status protocol (OCSP) is a method for delivering a status of a digital certificate to a requesting client. Under OCSP, a web server may present a digital certificate to a browser application. In turn, the browser application ensures that the certificate is valid before accepting the certificate. To do so, the browser application requests an OCSP response from a certificate authority (CA) that issued the certificate. When the CA receives the OCSP request, the CA sends a digitally signed OCSP r...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06
CPCH04L63/0823H04L63/1483H04L9/321H04L9/3268H04L67/568
Inventor MODI, SANJAYANDREWS, RICHARD
Owner DIGICERT
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap