Microsoft Technology Licensing, LLC

Vasantha K Ravula

Scott C Cottrille

Charles F Rose

Ravindra Pandya

Gregory Kostal

Muthukrishnan Paramasivam

Vladimir Yarmolenko

Yuhui Zhong

Charles F Iii Rose

Ravindra Nath Pandya

An improved certificate issuing system may comprise a certificate translation engine for translating incoming certificates and certificate requests from a first format into a second format. A certificate issuing engine may then operate on incoming requests in the common format. The issuing engine can issue certificates to clients according to its certificate issuing policy. The policy may be expressed as data in a policy expression language that can be consumed at runtime, which provides for flexible and efficient changing of issuing policy. Issued certificates can be translated back into a format that is consumed by the requesting client. Such translation can be performed by the translation engine prior to delivery of certificates to requesting clients.

Format-agnostic system and method for issuing certificates

An improved certificate issuing system may comprise a novel arrangement for expressing certificate issuing policy. The policy may be expressed in a human-readable policy expression language and stored for example in a file that is consumed by a certificate issuing system at runtime. The policy may thus be easily changed by altering the digital file. Certain techniques are also provided for extending the capabilities of the certificate issuing system so it may apply and enforce new policies.

Extendable data-driven system and method for issuing certificates

Growing community of inventors

Sammamish, WA, United States of America

Vasantha K Ravula