Patent ID: 8676998
Filing Date: 2014-03-18
Classification: H04L

Abstract:
1. A method comprising: deploying a proxy to serve as a representative of a management server, wherein the serve as the representative comprises collecting information to monitor and administer a private network, wherein the private network is a private domain; managing certificate production and distribution costs of the management server by establishing a half-authenticated data connection between the proxy and the management server using a client certificate, wherein the establishing comprises: receiving, by the management server, the client certificate from the proxy for authenticating the proxy, without the proxy authenticating the management server; validating, by the management server, the client certificate to authenticate the proxy, the validation of the client certificate comprising validating a cryptographic challenge of a certificate authority by obtaining a public key of the certificate authority and checking a signature associated with the public key; creating, by the management server, the half-authenticated data connection with the proxy in response to a successful validation of the client certificate; and communicating data between the proxy and the management server over the half-authenticated data connection in response to a successful validation of the client certificate.