SYSTEM AND METHOD FOR RETRIEVING CERTIFICATES ASSOCIATED WITH SENDERS OF DIGITALLY SIGNED MESSAGES
    32.
    发明申请
    SYSTEM AND METHOD FOR RETRIEVING CERTIFICATES ASSOCIATED WITH SENDERS OF DIGITALLY SIGNED MESSAGES 有权
    与数字签名信息的发送者相关的证书的系统和方法

    公开(公告)号:US20110099381A1

    公开(公告)日:2011-04-28

    申请号:US12981689

    申请日:2010-12-30

    IPC分类号: H04L9/32 G06F15/16

    摘要: A system and method for retrieving certificates and/or verifying the revocation status of certificates. In one embodiment, when a user opens a digitally signed message, a certificate that is required to verify the digital signature on the message may be automatically retrieved if it is not stored on the user's computing device (e.g. a mobile device), eliminating the need for users to initiate the task manually. Verification of the digital signature may also be automatically performed by the application after the certificate is retrieved. Verification of the revocation status of a certificate may also be automatically performed if it is determined that the time that has elapsed since the status was last updated exceeds a pre-specified limit.

    摘要翻译: 用于检索证书和/或验证证书的撤销状态的系统和方法。 在一个实施例中,当用户打开数字签名的消息时,如果消息中没有存储在用户的计算设备(例如,移动设备)上,则可以自动检索需要验证该消息上的数字签名的证书,从而消除了需要 为用户手动启动任务。 检索证书后,应用程序也可以自动执行数字签名的验证。 如果确定自上次更新状态以来已经过去的时间超过预定限制,则也可以自动执行证书的撤销状态的验证。

    System and method for retrieving related certificates
    33.
    发明授权
    System and method for retrieving related certificates 有权
    检索相关证书的系统和方法

    公开(公告)号:US07631183B2

    公开(公告)日:2009-12-08

    申请号:US10931108

    申请日:2004-09-01

    摘要: A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one embodiment, a certificate synchronization application is programmed to perform certificate searches by querying one or more certificate servers for all certificate authority (CA) certificates and cross-certificates on the certificate servers. In another embodiment, all certificates related to an identified certificate are retrieved from the certificate servers automatically by the certificate synchronization application, where the related certificates comprise at least one of one or more CA certificates and one or more cross-certificates. Embodiments of the invention facilitate at least partial automation of the downloading and establishment of certificate chains, thereby minimizing the need for users to manually search for individual certificates.

    摘要翻译: 用于搜索和检索证书的系统和方法,其可以用于编码消息的处理。 在一个实施例中,证书同步应用程序被编程为通过在一个或多个证书服务器上查询证书服务器上的所有证书颁发机构(CA)证书和交叉证书来执行证书搜索。 在另一个实施例中,证书同步应用程序自动从证书服务器检索与所识别的证书相关的所有证书,其中相关证书包括一个或多个CA证书和一个或多个交叉证书中的至少一个。 本发明的实施例促进了证书链的下载和建立的至少部分自动化,从而最小化对用户手动搜索单个证书的需要。

    METHOD, SYSTEM AND DEVICE FOR AUTHENTICATING A USER
    34.
    发明申请
    METHOD, SYSTEM AND DEVICE FOR AUTHENTICATING A USER 审中-公开
    用于认证用户的方法,系统和设备

    公开(公告)号:US20090282247A1

    公开(公告)日:2009-11-12

    申请号:US12500840

    申请日:2009-07-10

    IPC分类号: H04L9/00

    CPC分类号: G06F21/35 G06F21/34

    摘要: Embodiments described herein relate to a method and device for authenticating a user of a computer and a corresponding system using the method and device. The device is a handheld electronic device configured to receive a first authentication code and to generate a secure identification token. If the received first authentication code and the generated token match, a second authentication code is transmitted to a computer to unlock the computer.

    摘要翻译: 本文描述的实施例涉及一种用于认证计算机的用户和使用该方法和装置的相应系统的方法和装置。 该设备是被配置为接收第一认证码并生成安全识别令牌的手持电子设备。 如果接收到的第一认证码和生成的令牌匹配,则将第二认证码发送到计算机以解锁计算机。

    SYSTEM AND METHOD FOR PROCESSING CERTIFICATES LOCATED IN A CERTIFICATE SEARCH
    36.
    发明申请
    SYSTEM AND METHOD FOR PROCESSING CERTIFICATES LOCATED IN A CERTIFICATE SEARCH 有权
    在证书搜索中处理证书的系统和方法

    公开(公告)号:US20130007446A1

    公开(公告)日:2013-01-03

    申请号:US13615046

    申请日:2012-09-13

    IPC分类号: G06F21/00

    摘要: A system and method for processing certificates located in a certificate search. Certificates located in a certificate search are processed at a data server (e.g. a mobile data server) coupled to a computing device (e.g. a mobile device) to determine status data that can be used to indicate the status of those certificates to a user of the computing device, without having to download those certificates to the computing device in their entirety. The data server is further adapted to transmit the status data to the computing device. In one embodiment, at least one status property of the certificates is verified at the data server in determining the status data. In another embodiment, additional certificate data is determined and transmitted to the computing device, which can be used by the computing device to verify, at the computing device, at least one other status property of the certificates.

    摘要翻译: 用于处理位于证书搜索中的证书的系统和方法。 位于证书搜索中的证书在耦合到计算设备(例如,移动设备)的数据服务器(例如移动数据服务器)处理,以确定可用于向用户指示这些证书的状态的状态数据 计算设备,而无需将这些证书全部下载到计算设备。 数据服务器还适于将状态数据发送到计算设备。 在一个实施例中,在确定状态数据时,在数据服务器处验证证书的至少一个状态属性。 在另一个实施例中,确定附加证书数据并将其发送到计算设备,计算设备可以由计算设备在计算设备处验证证书的至少一个其他状态属性。

    System and method for application authorization
    37.
    发明授权
    System and method for application authorization 有权
    系统和应用程序授权方法

    公开(公告)号:US07805755B2

    公开(公告)日:2010-09-28

    申请号:US10996406

    申请日:2004-11-26

    摘要: A method and system for authorization of applications executing on a device having a key store. Applications obtain an application-level ticket to permit access to one or more key values located in the key store. Each ticket is securely associated with an application and being generated on the determination that the application is a trusted application. Tickets are potentially associated with one key value in the key store, with a subset of key values in the key store, or with all key values in the key store. Access to key values by an application is possible independently of a user providing a password for each such access.

    摘要翻译: 一种用于在具有密钥存储的设备上执行的应用的授权的方法和系统。 应用程序获得一个应用程序级票证,以允许访问位于密钥存储区中的一个或多个密钥值。 每个票据与应用程序安全地相关联,并且在确定应用程序是可信应用程序时生成。 门票可能与密钥库中的一个密钥值相关联,密钥存储中的密钥值的子集或密钥存储中的所有密钥值。 可以独立于为每个这样的访问提供密码的用户访问应用的密钥值。

    SYSTEM AND METHOD FOR RETRIEVING RELATED CERTIFICATES
    38.
    发明申请
    SYSTEM AND METHOD FOR RETRIEVING RELATED CERTIFICATES 有权
    检索相关证书的系统和方法

    公开(公告)号:US20100082976A1

    公开(公告)日:2010-04-01

    申请号:US12632217

    申请日:2009-12-07

    摘要: A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one embodiment, a certificate synchronization application is programmed to perform certificate searches by querying one or more certificate servers for all certificate authority (CA) certificates and cross-certificates on the certificate servers. In another embodiment, all certificates related to an identified certificate are retrieved from the certificate servers automatically by the certificate synchronization application, where the related certificates comprise at least one of one or more CA certificates and one or more cross-certificates. Embodiments of the invention facilitate at least partial automation of the downloading and establishment of certificate chains, thereby minimizing the need for users to manually search for individual certificates.

    摘要翻译: 用于搜索和检索证书的系统和方法,其可以用于编码消息的处理。 在一个实施例中,证书同步应用程序被编程为通过在一个或多个证书服务器上查询证书服务器上的所有证书颁发机构(CA)证书和交叉证书来执行证书搜索。 在另一个实施例中,证书同步应用程序自动从证书服务器检索与所识别的证书相关的所有证书,其中相关证书包括一个或多个CA证书和一个或多个交叉证书中的至少一个。 本发明的实施例促进了证书链的下载和建立的至少部分自动化,从而最小化对用户手动搜索单个证书的需要。

    Method, system and device for authenticating a user
    39.
    发明授权
    Method, system and device for authenticating a user 有权
    用于认证用户的方法,系统和设备

    公开(公告)号:US07562218B2

    公开(公告)日:2009-07-14

    申请号:US10919320

    申请日:2004-08-17

    IPC分类号: H04L9/00

    CPC分类号: G06F21/35 G06F21/34

    摘要: Preferred embodiments of the invention relate to a method and device for authenticating a user of a computer and a corresponding system using the method and device. The device is a handheld electronic device having accessible thereto a first authentication code of the user. The handheld electronic device requires a second authentication code for enabling use thereof. In order to authenticate the user to the computer, the handheld electronic device is configured to transmit the first authentication code to the computer over a communication link between the computer and the handheld electronic device.

    摘要翻译: 本发明的优选实施例涉及一种用于认证计算机的用户和使用该方法和装置的对应系统的方法和装置。 该设备是可访问用户的第一认证码的手持式电子设备。 手持电子设备需要第二认证码以使其能够使用。 为了将用户认证给计算机,手持电子设备被配置为通过计算机和手持电子设备之间的通信链路将第一认证码发送到计算机。