Alternative approach to deployment and payment for digital certificates

US9794248B2 · kind B2 · utility

Assignee

• Symantec Corporation · US

Inventors

• Quentin Liu · San Jose, US
• Kathleen Elizabeth Barnes · Santa Clara, US
• Richard F. Andrews · Menlo Park, US

Key dates

• Filing date: Dec 23, 2009
• Grant date: Oct 17, 2017
• Expiry date: Dec 10, 2032

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q30/06
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

A method for managing payment of digital certificates includes receiving a request to issue a digital certificate to a subscriber, capturing and saving payment information of the subscriber, performing a first authentication and verification of the subscriber at a first time, and performing at least one additional authentication and verification of the subscriber at least once every authentication period. A long-lived certificate is issued to the subscriber provided the subscriber is authenticated and verified. The long-lived certificate is valid for an expiration period. However, the long-lived certificate is revoked if (1) the additional authentications and verification produce invalid results, or (2) if payment is not received during a payment period. The authentication period is shorter than the expiration period and there are at least a first and a second authentication period within the expiration period. The expiration period is longer than the authentication period.