Patent ID: 8423762
Filing Date: 2013-04-16
Classification: H04L

Abstract:
1. A computer-implemented common access card heterogeneous (CACHET) method, comprising: receiving an identity certificate from a user, the identity certificate being supplied by a first secure domain and associated with a private key that is only known to the user, the identity certificate including a public key; receiving a request from the user to access a second secure domain; verifying an identity of the user using a private key infrastructure (PKI) process; if the identity certificate is proved to be issued by a trusted certificate authority (CA) and unexpired, extracting the public key from the identity certificate; applying business rules of the second secure domain to the public key, wherein the applying business rules of the second secure domain to the public key includes determining that users with an identify certificate supplied by the first secure domain is permitted to access the second secure domain; re-signing the public key to generate a CACHET certificate, the CACHET certificate being associated with the private key and trusted in the second secure domain, wherein the user is permitted to access applications and services in the second secure domain; wherein the CACHET certificate is issued without a need to replace the private key; and wherein the verifying, extracting, applying, and re-signing steps are performed in a same multi-level secure (MLS) domain, without regard to assertions made by systems at a lower level of security.