会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 6. 发明授权
    • Method and apparatus for distributing, interpreting, and storing heterogeneous certificates in a homogenous public key infrastructure
    • 用于在均匀的公共密钥基础设施中分发,解释和存储异构证书的方法和装置
    • US06895501B1
    • 2005-05-17
    • US09524272
    • 2000-03-13
    • Joseph A. Salowey
    • Joseph A. Salowey
    • H04L9/00H04L29/06
    • H04L63/126
    • A connection is established between a server and a web browser having access to a first, trusted public key. The server downloads a digitally signed archive to the browser, the archive including a second public key. The browser verifies the digitally signed archive using the first public key, and stores the second public key in response to the verification. The browser then uses the stored second public key to authenticate the server and establish a secure connection with the server. The second public key and its chain of trust need not be known by the browser beforehand, and the archive may include program fragments that store the key in an area where the browser (or an applet running under the browser) can access and use it. The archive may also include a program fragment that performs certificate validation for the client—enabling the client to handle certificate types it does not know about. Advantages include allowing the archive to be transmitted over any insecure connection since it is integrity protected and authenticated; and allowing the client to make a direct connection to the server without having to access certificate stores on the platform.
    • 在服务器和具有访问第一可信公钥的web浏览器之间建立连接。 服务器将数字签名的存档下载到浏览器,归档包括第二个公钥。 浏览器使用第一公钥验证数字签名的归档,并且响应于验证存储第二公钥。 然后,浏览器使用存储的第二个公钥来验证服务器,并建立与服务器的安全连接。 第二个公共密钥及其信任链不需要由浏览器预先知道,并且归档可以包括将密钥存储在浏览器(或浏览器下运行的小程序)可以访问和使用的区域中的程序片段。 存档还可以包括为客户机执行证书验证的程序片段,使得客户端能够处理它不知道的证书类型。 优点包括允许通过任何不安全的连接传输存档,因为它是完整性保护和认证的; 并允许客户端直接连接到服务器,而无需访问平台上的证书存储。