System and method for client-side authenticaton for secure internet communications
A system and method for client-side authentication for secure Internet communications is disclosed. In one embodiment, an intermediate device receives a web browser secure socket layer certificate from a web browser, authenticates the web browser using the secure socket layer certificate, and then re-signs the secure socket layer certificate with an intermediate device public key and an intermediate device certificate authority signature. The intermediate device sends the re-signed secure socket layer certificate to a web server and the web server authenticates the intermediate device using the re-signed secure socket layer certificate. In another embodiment, an intermediate device receives a web browser secure socket layer certificate from a web browser, inserts the web browser secure socket layer certificate into a HTTP header of a packet, and sends the packet to a web server.
1. A method for secure socket layer authentication performed by one or more devices on a computer network, the method comprising:
receiving a secure socket layer certificate from a first Internet device, the secure socket layer certificate including a public key and a certificate authority signature;
removing the public key and the certificate authority signature from the secure socket layer certificate;
creating a re-signed certificate by inserting an intermediate device public key and an intermediate device certificate authority signature into the secure socket layer certificate; and
sending the re-signed certificate to a second Internet device.
2. The method of claim 1 , wherein the intermediate device certificate authority signature was issued by a certificate authority that the second Internet device has been configured to trust.
3. The method of claim 1 , wherein an intermediate device that acts as a proxy for the second Internet device receives the secure socket layer certificate from the first Internet device, creates the re-signed certificate, and sends the re-signed certificate to the second Internet device.
4. The method of claim 1 , wherein a client-side intermediate device receives the secure socket layer certificate from the first Internet device, and a server-side intermediate device creates the re-signed certificate and sends the re-signed certificate to the second Internet device.
5. The method of claim 4 , wherein the client-side intermediate device removes the public key and the certificate authority signature from the secure socket layer certificate to create a stripped certificate and sends the stripped certificate to the server-side intermediate device.
6. The method of claim 1 , further comprising: authenticating the first Internet device at an intermediate device using the secure socket layer certificate.
7. The method of claim 1 , wherein the first Internet device comprises a client computer with a web browser and the second Internet device comprises a web server.
8. The method of claim 1 , wherein the secure socket layer certificate further includes a web browser identifier that is retained in the re-signed certificate.
9. A system for secure socket layer authentication, comprising:
one or more computers on a network, the one or more computers including a client-side intermediate device configured to receive a secure socket layer certificate from a first Internet device and to remove a public key and a certificate authority signature from the secure socket layer certificate to produce a stripped certificate;
the one or more computers further including a server-side intermediate device configured to receive the stripped certificate from the client-side intermediate device, to insert an intermediate device public key and an intermediate device certificate authority signature into the stripped certificate to create a re-signed certificate, and to send the re-signed certificate to a second Internet device.
10. The system of claim 9 , wherein the client-side intermediate device is configured to authenticate the first Internet device using the secure socket layer certificate.
11. The system of claim 9 , wherein the intermediate device certificate authority signature was issued by a certificate authority that the second Internet device has been configured to trust.
12. The system of claim 9 , wherein the client-side intermediate device and the server-side intermediate device communicate using a high-performance internode protocol.
13. The system of claim 9 , wherein the first Internet device comprises a client computer with a web browser and the second Internet device comprises a web server.
14. The system of claim 9 , wherein the one or more computers include at least one non-transitory computer-readable storage medium with instructions that configure the one or more computers.
15. A non-transitory computer-readable storage medium including instructions for performing:
receiving a secure socket layer certificate from a first Internet device, the secure socket layer certificate including a public key and a certificate authority signature;
removing the public key and the certificate authority signature from the secure socket layer certificate;
creating a re-signed certificate by inserting an intermediate device public key and an intermediate device certificate authority signature into the secure socket layer certificate; and
sending the re-signed certificate to a second Internet device.
16. The non-transitory computer-readable storage medium of claim 15 , further comprising: authenticating the first Internet device at an intermediate device using the secure socket layer certificate.
17. The non-transitory computer-readable storage medium of claim 15 , wherein the intermediate device certificate authority signature was issued by a certificate authority that the second Internet device has been configured to trust.
18. The non-transitory computer-readable storage medium of claim 15 , wherein the first Internet device comprises a client computer with a web browser and the second Internet device comprises a web server.