Patent ID: 9419806
Filing Date: 2016-08-16
CPC Classification: G06F,H04L

Claim Text:
1. A non-transitory computer-readable medium storing a certificate authority service which, when executed by a processor of a first device, is configured to: receive from a process on the first device a process certificate request comprising an indication of an identity of the process, a process public key, and an indication of one or more capabilities purported to be possessed by the process on the first device; verify any of the one or more capabilities purported to be possessed by the process on the first device; and create a process certificate that binds the identity of the process to the process public key, the process certificate comprising indications of the verified capabilities, the process certificate digitally signed using a private key of the first device that, together with a public key of the first device, forms a public/private key pair; and wherein the computer-readable medium further stores code which, when executed by the processor, causes the first device to: