Granted Patent B2

US 8,032,742 · App. 12/328,934 · Granted Oct 4, 2011

Assignee: Unisys Corporation

Abstract

Claims (68)

1. A computer-implemented method comprising:

receiving, with a computer, an initial configuration that specifies a trusted certificate authority;

receiving digital certificate information that includes a certificate revocation list (CRL) and a digital certificate issued by the trusted certificate authority;

storing the certificate information in the configuration of the computer;

with the digital certificate, initiating a secure communication session for a software application executing on the computer;

receiving, with the computer, an update to the certificate information; and

updating the configuration to reflect the update to the certificate information without terminating the communication session.

2. The method of claim 1 , further comprising:

maintaining a first context for the communication session; and

storing the certificate information in the first context, wherein updating the configuration further comprises, upon receiving the update to the certificate information:

creating a second context that stores a copy of the certificate information from the first context;

applying the update to the certificate information of the second context; and

applying the second context to the communication session to provide secure network communication through the communication session without terminating the communication session.

3. The method of claim 2 , wherein maintaining a first context comprises:

storing a connection identifier in the first context, wherein the connection identifier uniquely identifies the communication session with the communication interface process;

storing a location of a public key certificate file,

storing a public key and an associated private key for asymmetric key cryptography, and

storing a cipher suite list file that identifies at least one supported encryption algorithm.

4. The method of claim 1 , wherein receiving an update comprises receiving the update to the certificate information from a user.

5. The method of claim 4 , further comprising:

presenting a user interface to the user; and

receiving the update to the certificate information through the user interface.

6. The method of claim 4 , further comprising

receiving a command to retrieve the update from the user; and

retrieving the update in response to the command.

7. The method of claim 1 , wherein receiving an update comprises receiving a location of a file, wherein the file includes the update to the certificate information.

8. The method of claim 1 , wherein receiving, with the computer, an update to the certificate information comprises receiving an update to the CRL.

9. The method of claim 1 , wherein receiving, with the computer, an update to the certificate information comprises receiving an update to the digital certificate

wherein updating the configuration comprises updating a local certificate to reflect the update to the digital certificate, and

upon receiving a request for a second communication session, referring to the updated local certificate before initiating the second communication session.

10. A computing device comprising:

a communication suite that includes an implementation of the secure socket layer (SSL) protocol and an application programming interface (API) for the implementation of the SSL protocol; and

an application that interacts with the SSL API to initiate a communication session in accordance with the SSL protocol;

wherein the communication suite maintains a first context for the communication session of the application when the communication session is initiated, wherein the first context includes certificate information that includes a certificate revocation list (CRL) and a certificate, and

wherein the communication suite receives an update to the certificate information and applies the update to the certificate information without terminating the communication session and refers to the updated certificate information for the remainder of the communication session when transmitting or receiving data during the communication session.

11. The computing device of claim 10 , wherein the communication suite creates a second context for the communication session, upon receiving the update to the certificate information, applies the update to the certificate information in the second context, and applies the second context to the communication session to provide secure network communication through the communication session without terminating the communication session.

12. The computing device of claim 10 , further comprising a user interface to receive the update to the certificate information from a user.

13. The computing device of claim 10 further comprising a file system to store a file that includes the update to the certificate information.

14. The computing system of claim 13 , wherein the communication suite receives a location of the file, and in response to a command to apply the update to the certificate information, the communication suite retrieves the file from the location, extracts the update from the file, and applies the update.

15. The computing device of claim 10 , wherein the application comprises a communication interface process, further comprising:

an operating system that provides the communication suite in a base computing environment;

an emulation environment running as a process of the operating system; and

an emulated SSL implementation, running in the emulation environment, that provides an emulated SSL API to one or more applications running in the emulation environment,

wherein the communication interface process communicates with the emulated SSL implementation to receive data from the one or more applications and that calls at least one procedure provided by the SSL API of the communication suite to initialize the SSL implementation of the operating system.

16. The computing device of claim 15 , wherein the communication input/output process maintains a unique context for each of the one or more applications that initiates a communication session.

17. A device comprising:

means for receiving an initial configuration that specifies a trusted certificate authority;

means for receiving digital certificate information that includes a certificate revocation list (CRL) and a digital certificate issued by the trusted certificate authority;

means for storing the certificate information in the configuration;

means for initiating a communication session for an application using the digital certificate;

means for receiving an update to the certificate information; and

means for updating the configuration to reflect the update to the certificate information without terminating the communication session.

18. The device of claim 17 , further comprising:

means for maintaining a first context for the communication session; and

means for storing the certificate information in the first context,

wherein the means to update the configuration further comprises:

means for creating a second context that stores a copy of the certificate information from the first context;

means for applying the update to the certificate information of the second context; and

means for applying the second context to the communication session to provide secure network communication through the communication session without terminating the communication session.

19. The device of claim 18 , wherein means for maintaining a first context further comprise:

means for storing a connection identifier in the first context, wherein the connection identifier uniquely identifies the communication session with the communication interface process;

means for storing a location of a public key certificate file,

means for storing a public key and an associated private key for asymmetric key cryptography, and

means for storing a cipher suite list file that identifies at least one supported encryption algorithm.

20. The device of claim 17 , further comprising:

means for presenting a user interface to a user;

means for receiving the update to the certificate information through the user interface; and

means for applying the update to the certificate information in response to a command received through the user interface.

Assignments (13)

Continuity (1)