Source: http://www.google.com/patents/US7549043?dq=5,742,768
Timestamp: 2017-10-23 17:42:23
Document Index: 672551248

Matched Legal Cases: ['Application No. 200504221', 'Application No. 2005204221', 'Application No. 2', 'Application No. 200510095984', 'Application No. 04104195', 'Application No. 08154580', 'Application No. 04104195', 'Application No. 08154580', 'Application No. 04104195', 'Application No. 2290', 'Application No. 2005', 'Application No. 10', 'Application No. 10', 'Application No. 200505340', 'Application No. 200505340']

Patent US7549043 - Providing certificate matching in a system and method for searching and ... - Google Patents
A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one broad aspect, a message management server generates certificate identification data from a message that uniquely identifies a certificate associated with the message. The certificate...http://www.google.com/patents/US7549043?utm_source=gb-gplus-sharePatent US7549043 - Providing certificate matching in a system and method for searching and retrieving certificates
Publication number US7549043 B2
Application number US 10/931,109
Also published as US8296829, US8561158, US20060047962, US20090199007, US20130007447
Publication number 10931109, 931109, US 7549043 B2, US 7549043B2, US-B2-7549043, US7549043 B2, US7549043B2
Inventors Neil P. Adams, Michael S. Brown, Herbert A. Little
Patent Citations (22), Non-Patent Citations (28), Referenced by (20), Classifications (13), Legal Events (5)
Providing certificate matching in a system and method for searching and retrieving certificates
US 7549043 B2
1. A method of searching and retrieving certificates relating to a message received at a user's computing device from a sender, the message comprising data identifying a sender certificate associated with the message, wherein certificate identification data that uniquely identifies the sender certificate is generated from the data, and wherein the method comprises:
receiving at least a part of the message and certificate identification data at the user's computing device, said certificate identification data generated at a server and added to the at least part of the message at the server;
providing a certificate search request for certificates associated with the sender;
performing a search on one or more certificate servers, wherein at least one query is submitted to the one or more certificate servers to request retrieval of certificates satisfying the certificate search request;
retrieving at least one certificate satisfying the certificate search request from the one or more certificate servers;
processing each retrieved certificate using the certificate identification data to determine if the retrieved certificate is the sender certificate associated with the message; and
storing a one of the retrieved certificates on the user's computing device if the one of the retrieved certificates is the sender certificate associated with the message;
wherein the certificate identification data comprises a serial number and issuer data for the sender certificate; and wherein said processing comprises parsing each retrieved certificate to obtain a respective serial number and issuer data for the retrieved certificate and comparing the respective serial number and issuer data to the serial number and issuer data for the sender certificate.
2. The method of claim 1, wherein the user's computing device comprises a mobile device.
3. The method of claim 2, wherein said performing and retrieving are initiated at a second computing device coupled to the mobile device.
4. The method of claim 3, wherein the second computing device comprises a mobile data server.
5. The method of claim 3, wherein said processing is performed at the second computing device, and wherein the method further comprises downloading, to the mobile device from the second computing device, the one of the retrieved certificates if the one of the retrieved certificates is the sender certificate associated with the message.
6. The method of claim 3, wherein said processing is performed at the mobile device, and wherein the method further comprises downloading each retrieved certificate to the mobile device from the second computing device.
7. The method of claim 1, further comprising displaying a list identifying each retrieved certificate on the user's computing device, wherein the list indicates which retrieved certificate, if any, is determined to be the sender certificate associated with the message.
8. The method of claim 7, further comprising receiving one or more user selections of certificates from the list, and storing selected certificates in a certificate store on the user's computing device.
9. The method of claim 1, further comprising determining whether the sender certificate is stored on the user's computing device prior to said providing.
10. A computer-readable storage medium comprising a plurality of instructions for execution on a computing device causing the computing device to execute a method of searching and retrieving certificates relating to a message received at a user's computing device from a sender, the message comprising data identifying a sender certificate associated with the message, wherein certificate identification data that uniquely identifies the sender certificate is generated from the data, and wherein the method comprises:
11. A system for searching and retrieving certificates relating to a message received from a sender, the message comprising data identifying a sender certificate associated with the message, the system comprising:
a mobile data server adapted to receive a certificate search request from the mobile device for certificates associated with the sender, perform a search on one or more certificate servers by querying the one or more certificate servers for certificates satisfying the certificate search request, and retrieve certificates satisfying the certificate search request from the one or more certificate servers;
wherein at least one of the mobile device and the mobile data server is further adapted to process each retrieved certificate to determine, using the certificate identification data, if the retrieved certificate is the sender certificate associated with the message;
wherein the mobile device provides one or more certificate stores to store a one of the retrieved certificates if the one of the retrieved certificates is the sender certificate associated with the message; and
wherein the certificate identification data comprises a serial number and issuer data for the sender certificate; and wherein processing each retrieved certificate comprises parsing each retrieved certificate to obtain a respective serial number and issuer data for the retrieved certificate and comparing the respective serial number and issuer data to the serial number and issuer data for the sender certificate.
12. A method of searching and retrieving certificates relating to a message received at a user's computing device from a sender, the message comprising data identifying a sender certificate associated with the message, wherein certificate identification data that uniquely identifies the sender certificate is generated from the data, and wherein the method comprises:
receiving at least a part of the message and certificate identification data at the user's computing device said certificate identification data generated at a server and added to the at least part of the message at the server;
wherein the certificate identification data comprises a hash of at least a part of the sender certificate; and wherein said processing comprises applying a hash algorithm to each retrieved certificate to obtain a respective hash and comparing the respective hash to the hash of the at least a part of the sender certificate.
13. The method of claim 12, wherein the user's computing device comprises a mobile device.
14. The method of claim 13, wherein said performing and retrieving are initiated at a second computing device coupled to the mobile device.
15. The method of claim 14, wherein the second computing device comprises a mobile data server.
16. The method of claim 14, wherein said processing is performed at the second computing device, and wherein the method further comprises downloading, to the mobile device from the second computing device, the one of the retrieved certificates if the one of the retrieved certificates is the sender certificate associated with the message.
17. The method of claim 14, wherein said processing is performed at the mobile device, and wherein the method further comprises downloading each retrieved certificate to the mobile device from the second computing device.
18. The method of claim 12, further comprising displaying a list identifying each retrieved certificate on the user's computing device, wherein the list indicates which retrieved certificate, if any, is determined to be the sender certificate associated with the message.
19. The method of claim 18, further comprising receiving one or more user selections of certificates from the list, and storing selected certificates in a certificate store on the user's computing device.
20. The method of claim 12, further comprising determining whether the sender certificate is stored on the user's computing device prior to said providing.
21. A computer-readable storage medium comprising a plurality of instructions for execution on a computing device causing the computing device to execute a method of searching and retrieving certificates relating to a message received at a user's computing device from a sender, the message comprising data identifying a sender certificate associated with the message, wherein certificate identification data that uniquely identifies the sender certificate is generated from the data, and wherein the method comprises:
22. A system for searching and retrieving certificates relating to a message received from a sender, the message comprising data identifying a sender certificate associated with the message, the system comprising:
wherein the certificate identification data comprises a hash of at least a part of the sender certificate; and wherein processing each retrieved certificate comprises applying a hash algorithm to each retrieved certificate to obtain a respective hash and comparing the respective hash to the hash of the at least a part of the sender certificate.
23. A method of searching and retrieving certificates relating to a message received at a user's computing device from a sender, the message comprising data identifying a sender certificate associated with the message, wherein certificate identification data that uniquely identifies the sender certificate is generated from the data, and wherein the method comprises:
receiving at least a part of the message and certificate identification data at the user's computing device;
wherein the user's computing device comprises a mobile device;
wherein said performing and retrieving are initiated at a second computing device coupled to the mobile device;
wherein the second computing device comprises a mobile data server;
wherein said processing is performed at the second computing device; and
wherein the method further comprises downloading, to the mobile device from the second computing device, the one of the retrieved certificates if the one of the retrieved certificates is the sender certificate associated with the message.
24. The method of claim 23, further comprising displaying a list identifying each retrieved certificate on the user's computing device, wherein the list indicates which retrieved certificate, if any, is determined to be the sender certificate associated with the message.
25. The method of claim 24, further comprising receiving one or more user selections of certificates from the list, and storing selected certificates in a certificate store on the user's computing device.
26. The method of claim 23, further comprising determining whether the sender certificate is stored on the user's computing device prior to said providing.
27. A computer-readable storage medium comprising a plurality of instructions for execution on a computing device causing the computing device to execute a method of searching and retrieving certificates relating to a message received at a user's computing device from a sender, the message comprising data identifying a sender certificate associated with the message, wherein certificate identification data that uniquely identifies the sender certificate is generated from the data, and wherein the method comprises:
28. A system for searching and retrieving certificates relating to a message received from a sender, the message comprising data identifying a sender certificate associated with the message, the system comprising:
wherein the mobile data server is further adapted to process each retrieved certificate at the mobile data server to determine, using the certificate identification data, if the retrieved certificate is the sender certificate associated with the message;
wherein the one of the retrieved certificates is downloaded to the mobile device from the mobile data server if the one of the retrieved certificates is the sender certificate associated with the message.
For example, in an embodiment where the certificate identification data comprises a hash, at step 430, the messaging application generates a hash for each certificate stored on the mobile device in one or more designated certificate stores thereof, and compares each generated hash to the hash provided as certificate identification data, in order to determine whether the certificate is already stored on the mobile device. The same hash algorithm employed at step 410 is applied at this step (to the same parts or fields of the stored certificates if the entire certificates are not hashed) in generating the hashes of the stored certificates. Accordingly, if a generated hash of a given stored certificate matches the hash received from the message management server, then a match is deemed to have been determined.
The steps of a method of searching and retrieving certificates in embodiments of the invention may be provided as executable software instructions stored on computer-readable media, which may include transmission-type and storage-type media.
JP2001197055A Title not available
JP2001265216A Title not available
JP2002163395A Title not available
JP2003046499A Title not available
JP2003348078A Title not available
JP2004179724A Title not available
WO2003009561A2 * Jul 16, 2002 Jan 30, 2003 Research In Motion Limited A system and method for supporting multiple certificate authorities on a mobile communication device
WO2003079627A2 Mar 20, 2003 Sep 25, 2003 Research In Motion Limited System and method for supporting multiple certificate status providers on a mobile communication device
WO2003079628A1 Mar 20, 2003 Sep 25, 2003 Research In Motion Limited Certificate information storage system and method
1 "Blackberry Security with the S/MIME Support Package version 1.5", Research In Motion Limited, Dec. 17, 2003, pp. 1-24.
2 Australian Notice of Acceptance. Application No. 200504221. Dated: Jan. 15, 2008.
3 Australian Search Report. Application No. 2005204221. Dated: Nov. 6, 2006.
4 Canadian First Office Action. Application No. 2,517,209. Dated: Jul. 14, 2008.
5 * Chadwick, D.W. et al. "Modifiying LDAP to Support X.509-basedPKIs", In Seventeenth Annual IFIP WG 11.3 Working Conference on Database and Applications Security at Estes Park, Colorado, Aug. 2003.
6 Chinese First Office Action (English translation). Application No. 200510095984.7. Dated Nov. 21, 2008.
7 Co-pending U.S. Appl. No. 10/931,983, "System and Method for Searching and Retrieving Certificates", filed Sep. 2, 2004. (Retrievable from PAIR).
8 European Communication under Rule 51(4) EPC. Application No. 04104195.5. Dated: Oct. 31, 2007.
9 European Communications under Rule 71(3) EPC. Application No. 08154580.8. Dated Oct. 23, 2008.
10 European Search and Examination Report. Application No. 04104195.5 Date: Feb. 10, 2005.
11 European Search and Examination Report. Application No. 08154580.8. Dated: May 27, 2008.
12 European Search Report. Application No. 04104195.5 Dated: Dec. 14, 2006.
13 * Hämetvaara, Vesa. "Certificate Management in Mobile Devices", May 2002.
14 * Housley, R et al. "Internet X.509 Public Key Infrastructure Certificate and CRL Profile (RFC 2459)", Jan. 1999.
15 Indian Examination Letter. Application No. 2290/DEL/2005. Dated: Apr. 13, 2007.
16 * ITU-T. "Information technology-Open systems interconnection-The Directory: Public-key and attribute certificate frameworks", Mar. 2000.
17 Japanese First Office Action (English Translation). Application No. 2005-250982. Dated: January 14, 2009.
18 Korean Decision for Final Rejection (English translation). Application No. 10-2005-0081103. Dated: Apr. 12, 2007.
19 Korean Search Report. Application No. 10-2005-0081103. Dated: Sep. 27, 2006.
20 Miyagawa, "Internet security course starting from zero" second period, ASCII network PRO, vol. 5, No. 6, Japan ASCII Corporation, Jun. 2000, vol. 5, pp. 96-99.
21 * Myers, M. et al. "Certificate Management Messages over CMS (RFC 2797)", Apr. 2000.
22 Myers, M. et al., X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP, RFC2560 (Jun. 1999).
23 * Ramsdell, B. et al. "Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Certificate Handling (RFC 3850)", Jul. 2004.
24 Research In Motion Limited, "BlackBerry Security with S/MIME support Package version 1.5", Dec. 17, 2003.
25 Shikii, C++ Builder component programming [26], DDJ vol. 8, No. 3, Japan, Shoei Corporation, Mar. 1999, vol. 8, pp. 137-142.
26 Singapore Examination Report. Application No. 200505340-0. Dated: Sep. 19, 2006.
27 Singapore Written Opinion Application No. 200505340-0 Date: Jan. 25, 2005.
28 United States Office Action. U.S. Appl. No. 10/931,983. filed: Nov. 13, 2007. (Retrieved from PAIR).
US8959337 * Jun 25, 2012 Feb 17, 2015 International Business Machines Corporation Digital certificate issuer-correlated digital signature verification
US9197631 Jun 7, 2013 Nov 24, 2015 International Business Machines Corporation Digital certificate issuer-correlated digital signature verification
US9426146 Jan 7, 2015 Aug 23, 2016 International Business Machines Corporation Digital certificate issuer-correlated digital signature verification
US9749139 Jun 28, 2016 Aug 29, 2017 International Business Machines Corporation Digital certificate issuer-correlated digital signature verification
US9755838 Jun 28, 2016 Sep 5, 2017 International Business Machines Corporation Digital certificate issuer-correlated digital signature verification
US20130346743 * Jun 25, 2012 Dec 26, 2013 International Business Machines Corporation Digital certificate issuer-correlated digital signature verification
U.S. Classification 713/156, 726/6, 709/206, 713/176, 713/175
International Classification G06F7/04, H04L9/08, H04L9/32, G06F15/82
Cooperative Classification H04L63/0823, H04L63/0442
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:ADAMS, NEIL P.;BROWN, MICHAEL S.;LITTLE, HERBERT A.;REEL/FRAME:015985/0623