Systems and methods for managing security certificates through email
View Patent ↗The disclosed computer-implemented method for managing security certificates through email may include (1) receiving an encrypted email that contains both identifying information that identifies a security certificate for authenticating a website and a management command relating to the security certificate, (2) determining whether authentication of the encrypted email succeeded such that the management command is authorized, and (3) when a determination is made that authentication of the encrypted email succeeded, identifying the security certificate using the identifying information and executing the management command with respect to the identified security certificate. Various other methods, systems, and computer-readable media are also disclosed.
1. A computer-implemented method for managing security certificates through email, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
receiving an encrypted email that contains both identifying information that identifies a security certificate for authenticating a website and a management command relating to the security certificate, the encrypted email comprising a reply to a notification email, from a security certificate management service, that indicated an offer to issue the security certificate;
determining whether authentication of the encrypted email succeeded such that the management command is authorized;
when a determination is made that authentication of the encrypted email succeeded, identifying the security certificate using the identifying information and executing the management command with respect to the identified security certificate.
2. The computer-implemented method of claim 1 , further comprising, when a determination is made that authentication of the encrypted email failed, declining to execute the management command.
3. The computer-implemented method of claim 1 , wherein the management command comprises one of:
an accept command to accept the security certificate;
a revoke command to revoke the security certificate;
a reject command to reject the security certificate.
4. The computer-implemented method of claim 3 , wherein the encrypted email contains, as the management command, literal text of at least one of:
“accept”;
“revoke”;
“reject”.
5. The computer-implemented method of claim 1 , wherein the management command is contained within at least one of:
a body of the encrypted email;
a subject line of the encrypted email;
an attachment to the encrypted email.
6. The computer-implemented method of claim 1 , wherein the encrypted email is digitally signed to authenticate an author of the encrypted email.
7. The computer-implemented method of claim 6 , wherein the encrypted email is digitally signed using a SECURE/MULTIPURPOSE INTERNET MAIL EXTENSIONS standard.
8. The computer-implemented method of claim 1 , wherein the identifying information that identifies the security certificate comprises at least one of:
a serial number for the security certificate;
a domain name that the security certificate authenticates.
9. The computer-implemented method of claim 1 , further comprising executing the management command based on the determination that authentication of the encrypted email succeeded without further input from an author of the encrypted email.
10. The computer-implemented method of claim 1 , further comprising, upon executing the management command, automatically sending a reply email to a source of the encrypted email, the reply email indicating that the management command was executed.
11. The computer-implemented method of claim 1 , wherein the security certificate comprises a TRANSPORT LAYER SECURITY certificate.
12. The computer-implemented method of claim 1 , wherein the security certificate management service sent the notification email that indicated the offer to issue the security certificate in response to a certificate signing request.
13. The computer-implemented method of claim 1 , wherein the security certificate comprises
a SECURE SOCKETS LAYER certificate.
14. The computer-implemented method of claim 1 , wherein the identifying information that identifies the security certificate comprises a copy of the security certificate.
15. A system for managing security certificates through email, the system comprising:
a reception module, stored in memory, that receives an encrypted email that contains both identifying information that identifies a security certificate for authenticating a website and a management command relating to the security certificate, the encrypted email comprising a reply to a notification email, from a security certificate management service, that indicated an offer to issue the security certificate;
a determination module, stored in memory, that determines whether authentication of the encrypted email succeeded such that the management command is authorized;
an execution module, stored in memory, that, when a determination is made that authentication of the encrypted email succeeded, identifies the security certificate using the identifying information and executes the management command with respect to the identified security certificate;
at least one processor that executes the reception module, the determination module, and the execution module.
16. The system of claim 15 , wherein the execution module, when a determination is made that authentication of the encrypted email failed, declines to execute the management command.
17. The system of claim 15 , wherein the management command comprises one of:
an accept command to accept the security certificate;
a revoke command to revoke the security certificate;
a reject command to reject the security certificate.
18. The system of claim 15 , wherein the management command is contained within at least one of:
a body of the encrypted email;
a subject line of the encrypted email;
an attachment to the encrypted email.
19. The system of claim 15 , wherein the encrypted email is digitally signed to authenticate an author of the encrypted email.
20. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
receive an encrypted email that contains both identifying information that identifies a security certificate for authenticating a website and a management command relating to the security certificate, the encrypted email comprising a reply to a notification email, from a security certificate management service, that indicated an offer to issue the security certificate;
determine whether authentication of the encrypted email succeeded such that the management command is authorized;
when a determination is made that authentication of the encrypted email succeeded, identify the security certificate using the identifying information and execute the management command with respect to the identified security certificate.