Patent ID: 8484460
Filing Date: 2013-07-09
Classification: G06F,H04L

Abstract:
1. A system for detecting a man-in-the-middle attack, the system comprising: a client computer configured to receive a plurality of public key certificates for a plurality of domains, to store the plurality of public key certificates in a certificate store, to determine at least one public key certificate of the plurality of public key certificates that is associated with a domain of a server computer, and to upload the at least one public key certificate of the plurality of public key certificates to the server computer when a connection is established with the server computer; and the server computer configured to store public key certificates received from a certification authority, to expose an application programming interface for receiving public key certificates from a client computer, to receive the at least one public key certificate of the plurality of public key certificates from the client computer by way of the application programming interface, and to compare the public key certificates received from the certification authority to the at least one public key certificate received from the client computer to determine if at least one of the at least one public key certificate received from the client computer is fraudulent.