System and method for suspending and resuming digital certificates in a certificate-based user authentication application system
    2.
    发明授权
    System and method for suspending and resuming digital certificates in a certificate-based user authentication application system 失效
    在基于证书的用户认证应用系统中挂起和恢复数字证书的系统和方法

    公开(公告)号:US06775782B1

    公开(公告)日:2004-08-10

    申请号:US09282681

    申请日:1999-03-31

    IPC分类号: H04L900

    摘要: A method and system for certificating and authenticating an identity of a customer of a financial institution using digital certificates is provided. The customer and the financial institution communicate via a communications medium. The financial institution receives a digital registration request from the customer and verifies the identity of the customer by reconciling identification data in the digital registration request with identification data in a customer data structure at the financial institution. Responsive to verifying the identity of the customer, the financial institution generates a digital certificate and sends the digital certificate to the customer. When the customer desires access to an on-line application at the financial institution, the customer sends the previously issued digital certificate to the financial institution via the communications link. The financial institution authenticates the digital certificate and grants on-line application access based upon the authenticated digital certificate. The digital certificate may be suspended without being revoked by associatively storing certificate-state information with the distinguished name of the certificate owner, thereby providing a mechanism for suspending and resuming access privileges of the customer.

    摘要翻译: 提供了使用数字证书来证明和认证金融机构的客户身份的方法和系统。 客户和金融机构通过通信媒介进行通信。 金融机构从客户接收数字注册请求,并通过将数字注册请求中的识别数据与金融机构的客户数据结构中的识别数据进行协调来验证客户的身份。 响应验证客户的身份,金融机构生成数字证书,并将数字证书发送给客户。 当客户希望访问金融机构的在线申请时,客户通过通信链接将以前发布的数字证书发送给金融机构。 金融机构认证数字证书,并根据认证的数字证书授予在线应用访问权限。 可以通过将证书状态信息与证书所有者的可分辨名称相关联地存储而不被撤销,从而提供用于暂停和恢复客户的访问权限的机制来暂停数字证书。