System and method for managing network access based on a history of a certificate
Provided is a system and method for managing network access based on a history of a Certificate. The system includes an Authentication System structured and arranged to receive from a User a request for network access, the request including a Certificate and at least one associated Characteristic distinct from the Certificate. A validation system is in communication with the Authentication System and structured and arranged to receive a request for validation of the Certificate, the Validation System evaluating the at least one Characteristic against a History for the Certificate to provide a positive or negative evaluation. The Validation System updates the History for the Certificate to include the request for validation of the Certificate. In response to a positive evaluation validating the Certificate, the Authentication System permits network access to the user. In response to a negative evaluation the Authentication System blocking network access to the user and the Certificate being restricted. An associated method of use is also provided.
1. A method of managing network access based on a history of use for a Certificate comprising:
establishing the history of use for the certificate for managing the network access when the certificate is generated;
providing the certificate to the user;
receiving, by an authentication device, a request for network access from the user by way of a first device having at least one processor, the request providing the Certificate and having at least one Characteristic for validation of the Certificate and distinct from the Certificate;
insuring that the history of use for the certificate is established; if the history of use of Certificate has not been established, establishing the history of use for the certificate before evaluating the at least characteristic against the history of use for the certificate;
evaluating the at least one Characteristic by comparing the at least one characteristic with the history of use for the Certificate to provide a positive or negative evaluation of the request;
in response to a positive evaluation of the at least one characteristic in the Request, validating the Certificate provided in the request and permitting certificate based network access to the user's first device;
in response to a negative evaluation of the at least one characteristic in the request, restricting the Certificate provided with the request and blocking network access to the user's first device; and
updating the history of use for the Certificate to include the request.
2. The method of claim 1 , wherein evaluating the at least one Characteristic provides near real time adjustment to the apparent validity of the Certificate without the use of a Certificate Revocation List as provided by a Certificate authority.
3. The method of claim 1 , further including establishing the history of use for the Certificate when the Certificate is provided to the user for use with the first device.
4. The method of claim 1 , further including establishing the history of use for the Certificate when the Certificate is generated.
5. The method of claim 1 , further including establishing the history of use for the Certificate when the Certificate is provided with the request.
6. The method of claim 1 , wherein restricting the Certificate is revoking the Certificate.
7. The method of claim 1 , wherein restricting the Certificate initiates an opportunity for the user to re-authenticate him or herself before revoking the Certificate.
8. The method of claim 7 , wherein the opportunity for re-authentication is selected from the group consisting of: a Short Message Service (“SMS”) code to the user for entry upon a website, an SMS message which requires a specific SMS reply, an email with verification link, an email with a code for entry upon a website, an email that requires a reply, redirection to a website which requires completion of a captcha, and redirection to a website which requires entry of additional information.
9. The method of claim 1 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access with the first device within a regular use window.
10. The method of claim 1 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access with the first device within an approved time window.
11. The method of claim 1 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access with an authorized computing system having at least one processor.
12. The method of claim 1 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is not attempting access at a frequency above or below a threshold.
13. The method of claim 1 , wherein the method is provided on a non-transitory machine readable medium as a computer program comprising instructions which when executed by a computer system having at least one processor performs the steps of providing a Certificate for network access.
14. A system for managing certificate based network access based on a history of use of a Certificate provided to a user comprising:
an authentication hardware system structured and arranged to receive from a User by way of a first device having at least one processor, a request for certificate based network access, the request including the Certificate and at least one associated Characteristic for validation of the Certificate and distinct from the Certificate; and
a validation hardware system having at least one processor and being in communication with the authentication hardware system and structured and arranged to receive a request for validation of the Certificate, the validation system
insuring that the history of use for the certificate is established; if the history of use of Certificate has not been established, establishing the history of use for the certificate before evaluating the at least characteristic against the history of use for the certificate; and evaluating the at least one Characteristic by comparing the at least one characteristic with the history of use for the Certificate to provide a positive or negative evaluation of the request, the validation system further updating the history of use for the Certificate to include the request for validation of the Certificate;
wherein in response to a positive evaluation of the at least one characteristic in the Request validating the Certificate provided in the request, the authentication hardware or software system permitting certificate based network access to the user's first device and in response to a negative evaluation of the at least one characteristic in the Request the authentication system blocking network access to the user's first device and the Certificate provided with the request being restricted.
15. The system of claim 14 , wherein the validation system is a component of the authentication system.
16. The system of claim 14 , wherein the validation system is a component of a Certificate authority responsible for the Certificate.
17. The system of claim 14 , wherein the validation system is a disposed between the authentication system and a Certificate authority responsible for the Certificate.
18. The system of claim 14 , wherein the history of use for the Certificate is established when the Certificate is provided to a user.
19. The system of claim 14 , wherein the history of use for the Certificate is established when the Certificate is generated.
20. The system of claim 14 , wherein the history of use for the Certificate is established when the Certificate is provided with the request.
21. The system of claim 14 , wherein restricting the Certificate is revoking the Certificate.
22. The system of claim 14 , wherein restricting the Certificate initiates an opportunity for the user to re-authenticate him or herself before revoking the Certificate.
23. The system of claim 22 , wherein the opportunity for re-authentication is selected from the group consisting of: a Short Message Service (“SMS”) code to the user for entry upon a website, an SMS message which requires a specific SMS reply, an email with verification link, an email with a code for entry upon a website, an email that requires a reply, redirection to a website which requires completion of a captcha, and redirection to a website which requires entry of additional information.
24. The system of claim 14 , wherein evaluating the at least one Characteristic against the history of use is selected from the group consisting of: a verification that the user is attempting access within a regular use window, a verification that the user is attempting access within an approved time window, a verification that the user is attempting access with an authorized system, a verification that the user is not attempting access at a frequency above or below a threshold.
25. The system of claim 14 , wherein evaluating the at least one Characteristic provides near real time adjustment to the apparent validity of the Certificate without the use of a Certificate Revocation List as provided by a Certificate authority.
26. A non-transitory machine readable medium on which is stored a computer program for managing certificate based network access based on a history of use for a Certificate provided to a user, the computer program comprising instructions which when executed by a computer system having at least one processor performs the steps of:
establishing the history of use for the certificate for managing the network access when the certificate is generated;
receiving, by an authentication device, a request for network access from the user by way of a first device having at least one processor, the request providing the Certificate and having at least one Characteristic for validation of the Certificate and distinct from the Certificate;
insuring that the history of use for the certificate is established; if the history of use of Certificate has not been established, establishing the history of use for the certificate before evaluating the at least characteristic against the history of use for the certificate;
evaluating the at least one Characteristic by comparing the at least one characteristic with the history of use for the Certificate to provide a positive or negative evaluation of the request;
in response to a positive evaluation of the at least one characteristic in the Request, validating the Certificate provided in the request and permitting certificate based network access to the user's first device;
in response to a negative evaluation of the at least one characteristic in the request, restricting the Certificate provided with the request and blocking network access to the user's first device; and
updating the history of use for the Certificate to include the request.
27. The non-transitory machine readable medium of claim 26 , wherein evaluating the at least one Characteristic provides near real time adjustment to the apparent validity of the Certificate without the use of a Certificate Revocation List as provided by a Certificate authority.
28. The non-transitory machine readable medium of claim 26 , further including establishing the history of use for the Certificate when the Certificate is provided to the user.
29. The non-transitory machine readable medium of claim 26 , further including establishing the history of use for the Certificate when the Certificate is generated.
30. The non-transitory machine readable medium of claim 26 , further including establishing the history of use for the Certificate when the Certificate is provided with the request.
31. The non-transitory machine readable medium of claim 26 , wherein restricting the Certificate is revoking the Certificate.
32. The non-transitory machine readable medium of claim 26 , wherein restricting the Certificate initiates an opportunity for the user to re-authenticate him or herself before revoking the Certificate.
33. The non-transitory machine readable medium of claim 32 , wherein the opportunity for re-authentication is selected from the group consisting of: a Short Message Service (“SMS”) code to the user for entry upon a website, an SMS message which requires a specific SMS reply, an email with verification link, an email with a code for entry upon a website, an email that requires a reply, redirection to a website which requires completion of a captcha redirection to a website which requires entry of additional information.
34. The non-transitory machine readable medium of claim 26 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access within a regular use window.
35. The non-transitory machine readable medium of claim 26 , wherein evaluating the at least one Characteristic against the history is a verification that the user is attempting access within an approved time window.
36. The non-transitory machine readable medium of claim 26 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access with an authorized system.
37. The non-transitory machine readable medium of claim 26 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is not attempting access at a frequency above a threshold.
38. A non-transitory machine readable medium on which is stored a computer program comprising instructions to adapt a computer system having at least one processor to provide certificate based network access based on a history of use of a Certificate provided to a user comprising:
an input routine operatively associated with an input device for receiving a request for certificate based network access from a user by way of a first device having at least one processor, the request providing the Certificate and having at least one associated Characteristic related to the request and distinct from the Certificate;
an evaluating routine for insuring that the history of use for the certificate is established; if the history of use of Certificate has not been established, establishing the history of use for the certificate before evaluating the at least characteristic against the history of use for the certificate; and evaluating the at least one Characteristic by comparing the at least one characteristic with the history of use for the Certificate to provide a positive or negative evaluation of the request;
in response to a positive evaluation of the at least one characteristic in the Request, validating the Certificate provided in the request and permitting certificate based network access to the user's first device;
in response to a negative evaluation of the at least one characteristic in the request, restricting the Certificate provided with the request and blocking network access to the user's first device; and
updating the history of use for the Certificate to include the request; and
an output routine for returning at least validation or restriction of the Certificate as determined by the evaluating routine.
39. The non-transitory machine readable medium of claim 38 , wherein evaluating the at least one Characteristic provides near real time adjustment to the apparent validity of the Certificate without the use of a Certificate Revocation List as provided by a Certificate authority.
40. The non-transitory machine readable medium of claim 38 , wherein restricting the Certificate is revoking the Certificate.
41. The non-transitory machine readable medium of claim 38 , wherein restricting the Certificate initiates an opportunity for the user to re-authenticate him or herself before revoking the Certificate.
42. The non-transitory machine readable medium of claim 41 , wherein the opportunity for re-authentication is selected from the group consisting of: a Short Message Service (“SMS”) code to the user for entry upon a website, an SMS message which requires a specific SMS reply, an email with verification link, an email with a code for entry upon a website, an email that requires a reply, redirection to a website which requires completion of a captcha redirection to a website which requires entry of additional information.
43. The non-transitory machine readable medium of claim 38 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access within a regular use window.
44. The non-transitory machine readable medium of claim 38 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access within an approved time window.
45. The non-transitory machine readable medium of claim 38 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is attempting access with an authorized system.
46. The non-transitory machine readable medium of claim 38 , wherein evaluating the at least one Characteristic against the history of use is a verification that the user is not attempting access at a frequency above or below a threshold.