Certified Security Solutions, Inc.

Edward R Shorter

Kevin Michael Tambascio

Gary A Galehouse

Wayne A Harris

A system and method for validating SCEP certificate enrollment that enforces the pairing of a SCEP challenge password and a set of expected certificate request content. A SCEP Validation Service or software residing in another system component whether a certificate request is legitimate by comparing it to registered SCEP challenges and associated expected certificate request content. This system and method addresses a privilege-escalation vulnerability in prior SCEP-based systems that could lead to a practical attack.

Growing community of inventors

Munroe Falls, OH, United States of America

Edward R Shorter