IP Library › Granted Patent US 12683972
Granted Patent B2
US 12683972 · App. 18/959,552 · Granted Jul 14, 2026

ATA systems and methods for advanced dynamic trust store management systems

Inventor: Massimiliano Pala (Denver, CO)
Assignee: Cable Television Laboratories, Inc.
H04L63/102H04L63/123H04L61/4511H04L63/168
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12683972
App. No.
18/959,552
Granted
Jul 14, 2026
Kind
B2
Abstract

A trust store management system for a network communication ecosystem is provided. The system is programmed to a) receive a DNSSEC entry address of a DNSSEC entry stored at a DNSSEC server; b) transmit a request to a DNSSEC server to access information stored in the DNSSEC entry associated with the DNSSEC entry address; c) receive, from the DNSSEC server, the information stored in the DNSSEC entry; d) receive a trust store; and e) validate the trust store based on the information stored in the DNSSEC entry.

Claims (28)

1 . A user equipment for connecting to a network, comprising at least one processor and at least one memory device, wherein the at least one processor is in communication with the at least one memory device, wherein the at least one memory device including computer-executable instructions stored therein, which, when executed by the at least one processor, cause the at least one processor to:

transmit a request for access to a first server;

receive, from the first server, a DNSSEC entry address of a DNSSEC entry stored at a DNSSEC server, wherein the DNSSEC server is different from the first server;

transmit a request to the DNSSEC server to access information stored in the DNSSEC entry associated with the DNSSEC entry address;

receive, from the DNSSEC server, the information stored in the DNSSEC entry, wherein the information includes a location of a trust store;

retrieve the trust store based upon the location of the trust store, wherein the location of the trust store is different from the DNSSEC server and the first server; and

validate the trust store based on the information stored in the DNSSEC entry.

2 . The user equipment of claim 1 , wherein the information stored in the DNSSEC entry further includes authentication information for the trust store, and wherein the at least one processor is further caused to validate the trust store based upon the authentication information for the trust store stored in the DNSSEC entry.

3 . The user equipment of claim 1 , wherein the information stored in the DNSSEC entry includes a hash of at least a portion of the trust store.

4 . The user equipment of claim 1 , wherein the information stored in the DNSSEC entry includes an algorithm identifier to identify an algorithm to validate the trust store.

5 . The user equipment of claim 1 , wherein the information stored in the DNSSEC entry includes a trust store address of where the trust store is stored by a trust store provider, and wherein the instructions further cause the at least one processor to retrieve the trust store from the trust store provider.

6 . The user equipment of claim 1 , wherein the instructions further cause the at least one processor to receive the DNSSEC entry address from the first server.

7 . The user equipment of claim 6 , wherein the DNSSEC server is supported by a domain of the first server.

8 . The user equipment of claim 6 , wherein the DNSSEC server is separate from a domain of the first server.

9 . A method for trust store management, wherein the method is implemented by a computer device comprising at least one processor in communication with at least one memory device, wherein the computer device is in communication with a computer network, and wherein the method comprises:

transmitting a request for access to a first server;

receiving, from the first server, a DNSSEC entry address of a DNSSEC entry stored at a DNSSEC server, wherein the DNSSEC server is different from the first server;

transmitting a request to the DNSSEC server to access information stored in the DNSSEC entry associated with the DNSSEC entry address;

receiving, from the DNSSEC server, the information stored in the DNSSEC entry, wherein the information includes a location of a trust store;

retrieving the trust store based upon the location of the trust store, wherein the location of the trust store is different from the DNSSEC server and the first server; and

validating the trust store based on the information stored in the DNSSEC entry.

10 . The method of claim 9 , wherein the information stored in the DNSSEC entry further includes authentication information for the trust store, and wherein the method further comprises validating the trust store based upon the authentication information for the trust store stored in the DNSSEC entry.

11 . The method of claim 9 , wherein the information stored in the DNSSEC entry includes a hash of at least a portion of the trust store.

12 . The method of claim 9 , wherein the information stored in the DNSSEC entry includes an algorithm identifier to identify an algorithm to validate the trust store.

13 . The method of claim 9 , wherein the information stored in the DNSSEC entry includes a trust store address of where the trust store is stored by a trust store provider, and wherein the method further comprises retrieving the trust store from the trust store provider.

14 . The method of claim 9 further comprising receiving the DNSSEC entry address from the first server.

15 . The method of claim 14 , wherein the DNSSEC server is supported by a domain of the first server.

16 . The method of claim 14 , wherein the DNSSEC server is separate from a domain of the first server.