Patent ID: 8984280
Filing Date: 2015-03-17
Classification: H04L

Abstract:
1. A method for generating a digital certificate of an entity, comprising: generating, at the entity, a certificate signing request, the certificate signing request having at least public key information of the entity and identification information of the entity; combining verification information with the generated certificate signing request; transmitting, from the entity, the combination of the certificate signing request and the verification information; receiving, at a certification authority, the combination of the certificate signing request and the verification information from the entity; transmitting the combination of the certificate signing request and the verification information to a registration authority; extracting, at the registration authority, the verification information from the combination of the certificate signing request and the verification information; processing, at the registration authority, the information of the certificate signing request and the extracted verification information; determining whether to approve the certificate signing request based on a result of the processing; transmitting an approval to the certification authority when the certificate signing request is approved; generating a certificate associated with the entity when the approval is received by the certification authority; and transmitting the certificate to the entity, wherein the verification information includes at least one of shared secret information, network address information, device identification information, or location information, wherein the combining the verification information with the generated certificate signing request is performed by embedding at least one of said shared secret information, network address information, device identification information, or location information within a network transmission protocol wrapper of the certificate signing request before the transmitting the combination of the certificate signing request and the verification information to the certificate authority, and wherein the verification information is selected based on a determination of sufficiency of the verification information in accordance with a predetermined criteria.