Certificate pinning using a directory service
US10091006B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Feb 9, 2016 |
| Grant date | Oct 2, 2018 |
| Priority date | — |
| Expiry date | Dec 31, 2036 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1466
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A user device obtains a set of one or more public key certificates for a server received from a directory service, and a current public key certificate of the server received from the server. The user device compares the current public key certificate received from the server with the set of public key certificates received from the directory service. If the current public key certificate of the server matches one of the public key certificates in the set of public key certificates for the server, the authenticity of the server is confirmed, and communications are permitted between the user device and the server. Communications between the user device and the server may be prevented unless the current public key certificate from the server matches a public key certificate in the set of public key certificates received from the directory service.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.