Patent ID: 7610484

Claim:
A method for generating certificates used in communication across a network comprising: receiving at a portal on a server side of a public key infrastructure, a request for a certificate from a client; said portal scheduling said request and processing said request using a first policy engine in accordance with a first set of predefined protocols and thereby offload processing tasks from a certification authority, said portal being communicably interposed between said client and said certification authority, said first policy engine allowing policies to be defined and modified, said policies comprising a set of rules that define how a system operates; said portal determining whether to approve or deny said request according to said first set of predefined protocols, said portal configured to provide multiple protocol handling to accommodate different client types and configured to translate protocol requests and relay back protocol responses between said clients and said certification authority; for an approved request, said portal requesting a certificate from said certification authority; said certification authority receiving said request from said portal and generating said certificate according to a second set of predefined policies using a second policy engine to complete processing in generation of said certificate, said certification authority being configured to issue certificates through said portal and to store certificates in a directory; said certification authority issuing said certificate to said portal; and said portal providing said certificate to said client; wherein each of said policy engines includes at least one policy configured as a software component to perform the discrete functions associated with said policy and to generate a notification in response to a change in state upon completion of said policy to enable policies to be defined and modified to provide flexibility in said public key infrastructure.