Granted Patent B2

US 10,445,109 · App. 15/238,561 · Granted Oct 15, 2019

Inventor: Alok Naik (Bangalore, IN)

Assignee: DigiCert, Inc.

G06F9/44505G06F1/32H04L9/0825H04L9/0891H04L9/3268

Abstract

Claims (79)

1. A computer-implemented method for updating at least one computing device of a plurality of computing devices, the method comprising:

obtaining, at a first computing device of a plurality of computing devices, a digital certificate and a first keypair including a first public key and a first private key, wherein the first keypair is associated with the digital certificate;

updating the first computing device with the digital certificate and the first private key;

obtaining, at the first computing device, a second public key of a second keypair associated with a second computing device of the plurality of computing devices;

encrypting, at the first computing device, the digital certificate and the first private key using the second public key to form an encrypted digital certificate and first private key;

sending the encrypted digital certificate and first private key to the second computing device;

decrypting, at the second computing device, the encrypted digital certificate and first private key using a second private key of the second keypair; and

updating the second computing device with the digital certificate and the first private key.

2. The method of claim 1 , wherein obtaining, at the first computing device, the digital certificate and the first keypair comprises:

generating, at the first computing device, the first private key and the first public key;

sending the first public key to a certificate device as part of a certificate signing request; and

receiving, at the first computing device, the digital certificate from the certificate device based on the certificate signing request.

3. The method of claim 1 , wherein sending the encrypted digital certificate and first private key to the second computing device comprises:

encrypting, by the first computing device, the encrypted digital certificate and first private key to generate further encrypted data using a third public key of a third keypair associated with a third computing device of the plurality of computing devices;

sending the further encrypted data to the third computing device;

decrypting, by the third computing device, the further encrypted data using a third private key of the third keypair; and

sending the encrypted digital certificate and first private key from the third computing device to the second computing device.

4. The method of claim 1 , wherein the plurality of computing devices comprises a group of computing devices in addition to the first and second computing devices, the method further comprising updating the plurality of computing devices including the group of computing devices with the digital certificate and the first private key.

5. The method of claim 1 , further comprising:

encrypting, at the second computing device, the digital certificate and the first private key using a third public key associated with a third computing device of the plurality of computing devices to form a second encrypted digital certificate and first private key, the third public key being part of a third keypair comprising the third public key and a third private key associated with the third computing device;

sending the second encrypted digital certificate and first private key to the third computing device;

decrypting, at the third computing device, the second encrypted digital certificate and first private key using the third private key; and

updating the third computing device with the digital certificate and the first private key.

6. The method of claim 1 , further comprising:

encrypting, at the first computing device, the digital certificate and the first private key using a third public key of a third keypair associated with a third computing device of the plurality of computing devices to form a second encrypted digital certificate and first private key;

sending the second encrypted digital certificate and first private key to the third computing device;

decrypting, at the third computing device, the second encrypted digital certificate and first private key using a third private key of the third keypair; and

updating the third computing device with the digital certificate and the first private key.

7. The method of claim 1 , wherein each of the plurality of computing devices is configured to provide the digital certificate to at least one other computing system as part of establishing a secure session with the at least one other computing system.

8. The method of claim 1 , wherein each of the plurality of computing devices is configured to provide the digital certificate to at least one other computing system at part of establishing a secure sockets layer (SSL) or a transport layer security (TLS) session with the at least one other computing system.

9. The method of claim 1 , wherein each of the plurality of computing devices is configured to sign a message using the first private key and send the signed message to at least one other computing system as part of securely communicating with the at least one other computing system.

10. The method of claim 1 , further comprising:

identifying, with a computing system, times at which each of the plurality of computing devices is at peak load;

determining, with the computing system, a sequence by which to update the computing devices of the plurality of computing devices with the digital certificate and the first private key based on the identified times at which each of the plurality of computing devices is at peak load; and

sending, in an encrypted form and in the determined sequence, the digital certificate and the first private key to each of the plurality of computing devices.

11. The method of claim 1 , wherein sending the encrypted digital certificate and first private key to the second computing device comprises:

determining that the first computing device is unable to directly communicate with the second computing device; and

based on said determining that the first computing device is unable to directly communicate with the second computing device, sending the encrypted digital certificate and first private key from the first computing device to the second computing device through an intermediary device by:

encrypting, at the first computing device, the encrypted digital certificate and first private key to generate further encrypted data using a third public key of a third keypair associated with the intermediary device;

sending the further encrypted data to the intermediary device;

decrypting, by the intermediary device, the further encrypted data using a third private key of the third keypair; and

sending the encrypted digital certificate and first private key from the intermediary device to the second computing device.

12. A computing system for updating at least one computing device of a plurality of computing devices, the computing system comprising:

a first computing device of a plurality of computing devices, the first computing device comprising a memory and a processor configured to:

obtain a digital certificate and a first keypair including a first public key and a first private key, wherein the first keypair is associated with the digital certificate;

update the first computing device with the digital certificate and the first private key;

obtain a second public key of a second keypair associated with a second computing device of the plurality of computing devices;

encrypt the digital certificate and the first private key using the second public key to form an encrypted digital certificate and first private key; and

send the encrypted digital certificate and first private key to the second computing device; and

the second computing device of the plurality of computing devices, the second computing device comprising a memory and a processor configured to:

decrypt the encrypted digital certificate and first private key using a second private key of the second keypair; and

update the second computing device with the digital certificate and the first private key.

13. The computing system of claim 12 , wherein the processor of the first computing device is further configured to:

generate the first private key and the first public key;

send the first public key to a certificate device as part of a certificate signing request; and

receive the digital certificate from the certificate device based on the certificate signing request.

14. The computing system of claim 12 , wherein to send the encrypted digital certificate and first private key to the second computing device, the processor of the first computing device is configured to:

encrypt the encrypted digital certificate and first private key to generate further encrypted data using a third public key of a third keypair associated with a third computing device of the plurality of the computing devices; and

send the further encrypted data to the third computing device, wherein the third computing device is configured to:

decrypt the further encrypted data using a third private key of the third keypair, and

send the encrypted digital certificate and first private key from the third computing device to the second computing device.

15. The computing system of claim 12 , wherein the processor of the first computing device is further configured to:

obtain a third public key of a third keypair associated with a third computing device of the plurality of computing devices;

encrypt the digital certificate and the first private key using the third public key to form a second encrypted digital certificate and first private key; and

send the second encrypted digital certificate and first private key to the third computing device,

wherein the third computing device is configured to:

decrypt the second encrypted digital certificate and first private key using a third private key of the third keypair, and

store the digital certificate and the first private key.

16. The computing system of claim 12 , wherein each of the plurality of computing devices comprises a memory and a processor configured to provide the digital certificate to at least one other computing system as part of establishing a secure session with the at least one other computing system.

17. The computing system of claim 12 , wherein each of the plurality of computing devices comprises a memory and a processor configured to provide the digital certificate to at least one other computing system at part of establishing a secure sockets layer (SSL) or a transport layer security (TLS) session with the at least one other computing system.

18. The computing system of claim 12 , wherein each of the plurality of computing devices comprises a memory and a processor configured to sign a message using the first private key and send the signed message to at least one other computing system as part of securely communicating with the at least one other computing system.

19. A non-transitory computer-readable medium comprising instructions that when executed by a computing device cause the computing device to perform a method for updating at least one computing device of a plurality of computing devices, the method comprising:

obtaining, at a first computing device of a plurality of computing devices, a digital certificate and a first keypair including a first public key and a first private key, wherein the first keypair is associated with the digital certificate;

updating the first computing device with the digital certificate and the first private key;

obtaining, at the first computing device, a second public key associated with a second computing device of the plurality of computing devices;

encrypting, at the first computing device, the digital certificate and the first private key using the second public key to form an encrypted digital certificate and first private key;

sending the encrypted digital certificate and first private key to the second computing device;

decrypting, at the second computing device, the encrypted digital certificate and first private key using a second private key of a second keypair; and

updating the second computing device with the digital certificate and the first private key.

Assignments (11)

Priority Claims (1)

Continuity (1)