International Business Machines Corporation

Robert Burns

Robert B Carroll

Hamid Bacha

Mark Fisk

Hiroshi Maruyama

Khalid A Asad

Dieter Poetzschke

Hatem Ghafir

Roger Reider

Ku Lee

Lolo Lasida

Larry An

Drew Kittel

Robert Briggs

Paresh Patel

Srinivasa Kasturi

Raymond Good

Amit Pamecha

A vault controller manages resources in a secure environment or vault dedicated to an authorized user(s) for conducting electronic business in a distributed information system, e.g., the Internet. The controller includes a web server and a supervisor in a shared object library which runs as part of an HTTP daemon. The supervisor runs as a multi-threaded process and includes multiple service supervisor (SS) threads; a communication supervisor (CS) thread; a request supervisor (RS) thread; state and data tables and a vault daemon to support launching secure processes mapped to users through digital certificates included in user requests to the controller.

Vault controller supervisor and method of operation for managing multiple independent vault processes and browser sessions for users in an electronic business system

A vault controller manages resources in a secure environment or vault dedicated to an authorized user(s) for conducting electronic business in a distributed information system. The controller includes a web server and a supervisor in a shared object library, which runs as part of an HTTP daemon. The supervisor runs as a multi-threaded process with state and data tables and a vault daemon to support launching secure processes mapped to users through digital certificates. The vault daemon generates a password for a user request based on the user ID. The vault daemon launches a vault process (VP) running in a vault mapped to the user ID. After launching, the VP returns a message to the supervisor including a token identifying the thread. The supervisor sends the user request through a socket to the secure VP mapped to the user ID. The VP receives the request and launches a VP thread to handle the request. The VP thread writes the process data back through the socket to the supervisor thread for return to the user.

A secure-end-to-end communication system for electronic business system and method of operation, e.g., the Internet, includes a web server&mdash;vault controller having personal storage vaults in the controller for users, registration and certification authorities. Each personal vault runs programs on the controller under a unique UNIX user ID. Data storage is provided by the controller wherein the storage is owned by the same user ID assigned to the vault. A registration authority running as a software application in the controller processes requests to issue, renew and revoke digital certificates issued by a certification authority using two pairs of public-private keys. The registration authority interacts with the vault controller to decide whether an applicant qualifies to receive a digital certificate. The certification authority running as software application in the controller includes a certificate management system that provides services such as issuing, revoking, suspending, resuming, and renewing a user's right to digital certificates.

Secure server using public key registration and methods of operation

Growing community of inventors

Pembroke Pines, FL, United States of America

Robert Burns