Patent ID: 8732472

Claim:
In a computer network, a method for analyzing authenticity digital certificates, the method comprising: obtaining, from a plurality of diverse information sources within the computer network, initial information pertaining to digital certificates, wherein for each of the digital certificates the initial information includes: intrinsic parameter data from among contents of the digital certificate; extrinsic parameter data pertaining to the digital certificate and comprising static data not contained in the contents of the digital certificate; storing, in a data store, selected parameter data from among the intrinsic parameter data and the extrinsic parameter data; analyzing the selected parameter data to determine a measure of suspiciousness for each of the digital certificates; based on the measure of suspiciousness, determining a need for collection of supplemental data for further analysis of any of the digital certificates; in response to the determination of need for supplemental data for any of the digital certificates, collecting circumstantial data pertaining to that digital certificate, the circumstantial data being based on actual usage of that digital certificate; comparing the initial data and supplemental data against a set of decision criteria, the set of decision criteria defining parameters and combinations of parameters associated with fraudulent activity; and based on the comparing, providing a determination of authenticity of each of the digital certificates.