Oracle International Corporation

Andrew B Philips

Ramana Rao Turlapati

Mark Fisher

Marilyn Joyce Schneider Hollinger

One embodiment of the present invention provides a system for digitally signing electronic mail that originates from a browser. The system operates by first receiving a message from a browser at a mail server. The mail server formats the message and returns the formatted message to the browser so that the browser can sign the message. The mail server then receives the signature for the formatted message from the browser and encapsulates the formatted message and the signature into a secure message. Next, the mail server forwards the secure message to the intended recipients for the message.

Method and apparatus for digitally signing electronic mail that originates from a browser

A system and method for provisioning digital certificates. An automated provisioning engine receives notification of a need to provision a user with a digital certificate. The engine electronically instructs the user to obtain a digital certificate. When obtained, the user responds by forwarding the certificate. The engine then electronically instructs a trusted or provisioned user to verify that the user obtained the digital certificate. The trusted user verifies this, and may obtain the user's certificate or a fingerprint of the certificate to include in a response to the provisioner's instructions. If verified, and if the certificate or fingerprint matches the certificate provided by the user, the user's digital certificate is then activated, to allow it to represent the user in public key transactions.

Self-service provisioning of digital certificates

One embodiment of the present invention provides a system that uses a password-derived prime number to facilitate a secure key exchange between a client and a server across a network. During operation, the client receives a password from a user. Next, the client uses the password to determine a prime number P associated with the password. The client then uses the prime number P to determine a generator g associated with P. The client uses this prime number to calculate X=gmod P, wherein x is a random number generated by the client. Next, the client sends X to the server. The client also receives Y=gmod P from the server, wherein y is a random number generated by the server. The client then computes a secret key K=Ymod p at the client, which the server can similarly obtain by computing K=Xmod p. In this way, the client and the server can both obtain the same secret key Kthrough insecure communications over the network.

Key-exchange protocol using a password-derived prime

One embodiment of the present invention provides a system that facilitates single sign-on of an application cluster, wherein the application cluster includes a plurality of computer applications residing on the same computer system. The system operates by first receiving a logon request at a server from the application cluster, wherein the logon request specifies an account for the server. Next, the system authenticates the application cluster to the server and determines if the application cluster is authorized to use the specified account. If so, the system authorizes the application cluster to use the specified account.

Method and apparatus for facilitating single sign-on of an application cluster

One embodiment of the present invention provides a system for obtaining an electronic signature from a browser. During operation, the system receives a request for an electronic signature for a document, wherein the request is received from an application in a standardized format that is independent of browser type and signing method. Next, the system reformats the request to be compatible with a given browser type and signing method, and then forwards the reformatted request to the browser to obtain an electronic signature for the document. Finally, the system receives the electronic signature from the browser and returns the electronic signature to the application.

Growing community of inventors

San Francisco, CA, United States of America

Andrew B Philips