The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 08, 2022

Filed:

Oct. 11, 2018
Applicant:

Entrust, Inc., Dallas, TX (US);

Inventors:

Thomas P. Chmara, Richmond, CA;

Lucas J. Koops, Kanata, CA;

Jon Ferguson, Gloucester, CA;

Assignee:

ENTRUST, INC., Dallas, TX (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/64 (2013.01); G06F 21/10 (2013.01); H04L 9/32 (2006.01); H04L 9/08 (2006.01); H04L 9/40 (2022.01); G06F 9/455 (2018.01); H04L 9/00 (2022.01); G06F 21/12 (2013.01);
U.S. Cl.
CPC ...
H04L 9/3263 (2013.01); G06F 9/45558 (2013.01); H04L 9/006 (2013.01); H04L 9/0825 (2013.01); H04L 9/0866 (2013.01); H04L 9/321 (2013.01); H04L 9/3228 (2013.01); H04L 63/102 (2013.01); G06F 2009/45587 (2013.01);
Abstract

One or more computing devices employs a method that includes requesting a transient credential (e.g., a one-time PKI certificate) as a first identity credential for an application component instance based on a unique identifier associated with the application component instance. The method includes requesting a dynamically-created second identity credential for the application component instance of the application using a request signed (e.g., using the public key of the first identity PKI certificate) based on the transient credential. The method includes receiving the dynamically-created second identity credential and using the dynamically-created second identity credential in a cryptographic function by the application component instance; and managing the replacement of this credential in environments without persistent archival storage accessible by the device/application.


Find Patent Forward Citations

Loading…