Patent ID: 6941455

Claim:
A method for cross directory authentication in a Public Key Infrastructure (PKI) comprising: configuring a first directory to query a second directory when receiving queries regarding signature certificates from a second enterprise PKI, the first directory being part of a first enterprise PKI, the second directory being part of the second enterprise PKI; configuring the first directory with information regarding users with signature certificates associated with the second enterprise PKI that are allowed access to the server; attempting access to a server by a user, the server being part of the first enterprise PKI, the user presenting a signature certificate from the second enterprise PKI to the server for authentication; sending a query to the first directory from the server to determine if the user is allowed access to the server; sending a query to the second directory from the first directory to determine if the user is a member of the second enterprise PKI; and signaling the server by the first directory that the user is allowed access to the server if the user is a member of the second enterprise PKI.