Digital certificate filtering based on intrinsic and derived attributes
A method and system for generating multiple profiles corresponding to different digital certificates. The profile includes intrinsic attributes and derived attributes associated with a digital certificate. The system enables a customer system to filter digital certificates based on a suitability of the various digital certificates for use with a given application to be executed by or on behalf of the customer system. The suitability may be determined based on a comparison of certificate requirements associated with a customer system's request and one or more of the intrinsic attributes and derived attributes.
1. A method comprising:
identifying a plurality of digital certificates comprising a first digital certificate and a second digital certificate;
generating a first profile comprising:
a first set of intrinsic attributes extracted from one or more fields of the first digital certificate; and
a first set of derived attributes derived based on an analysis of at least one of the first set of intrinsic attributes or first metadata associated with the first digital certificate;
generating a second profile comprising:
a second set of intrinsic attributes extracted from one or more fields of the second digital certificate; and
a second set of derived attributes derived based on an analysis of at least one of the second set of intrinsic attributes or second metadata associated with the second digital certificate;
receiving, from a customer system, a request for a suitable digital certificate configured for use with an application, wherein the request comprises a first digital certificate requirement;
comparing the first set of intrinsic attributes and the first set of derived attributes to the first digital certificate requirement to determine a first suitability score;
comparing the second set of intrinsic attributes and the second set of derived attributes to the first digital certificate requirement to determine a second suitability score; and
providing, in response to the request, a list comprising a ranking of the first digital certificate and the second digital certificate based on the first suitability score and the second suitability score.
2. The method of claim 1 , further comprising receiving, from the customer system, a selection of the first digital certificate from the list.
3. The method of claim 2 , further comprising:
in response to the selection, generating a certificate call for the first digital certificate, the certificate call comprising customer data associated with the customer system; and
providing, to the customer system, the first digital certificate comprising the customer data.
4. The method of claim 1 , further comprising:
generating a first derived attribute; and
generating a second derived attribute based at least in part on the first derived attribute.
5. A system comprising:
a processing device; and
a memory to store computer-executable instructions that, if executed, cause the processing device to:
for each of a plurality of digital certificates, generate a profile comprising:
a set of first attributes extracted from information defining a digital certificate; and
a set of second attributes based on an analysis of at least a portion of the set of first attributes;
identify a first digital certificate requirement associated with an application; and
provide a list identifying a first digital certificate in response to the first digital certificate requirement matching at least a portion of the profile associated with the first digital certificate.
6. The system of claim 5 , the processing device to:
extract information from one or more fields of the digital certificate; and
determine one or more intrinsic attributes based on the information.
7. The system of claim 5 , the processing device to apply one or more heuristics to one or more first attributes to generate one or more derived attributes.
8. The system of claim 5 , wherein the set of first attributes comprises one or more intrinsic attributes associated with the digital certificate, and wherein the set of second attributes comprises one or more derived attributes associated with the digital certificate.
9. The system of claim 8 , the processing device to maintain a data store comprising a plurality of profiles, wherein each profile corresponds to one of the plurality of digital certificates.
10. The system of claim 9 , the processing device to index the data store by at least one of a first intrinsic attribute or a first derived attribute.
11. The system of claim 9 , the processing device to search the data store using the first digital certificate requirement to identify one or more profiles comprising at least one of an intrinsic attribute or a derived attribute matching the first digital certificate requirement.
12. The system of claim 5 , wherein the first digital certificate requirement is identified by analyzing at least one of a traffic pattern associated with the application, one or more clients associated with the application, or one or more web browser types associated with the application.
13. The system of claim 5 , the processing device to:
receive, from the customer system, a selection of the first digital certificate from the list; and
provide the first digital certificate to the customer system.
14. A non-transitory computer-readable storage device storing computer-executable instructions that, if executed by a processing device, cause the processing device to:
for each of a plurality of digital certificates, generate a profile comprising:
a set of first attributes extracted from information defining a digital certificate; and
a set of second attributes based on an analysis of at least a portion of the set of first attributes;
identify a first digital certificate requirement associated with an application; and
provide a list identifying a first digital certificate in response to the first digital certificate requirement matching at least a portion of the profile associated with the first digital certificate.
15. The non-transitory computer-readable storage device of claim 14 , the processing device to:
extract information from one or more fields of the digital certificate; and
determine one or more intrinsic attributes based on the information.
16. The non-transitory computer-readable storage device of claim 14 , the processing device to apply one or more heuristics to one or more first attributes to generate one or more derived attributes.
17. The non-transitory computer-readable storage device of claim 14 , the processing device to maintain a data store comprising a plurality of profiles, wherein each profile corresponds to one of the plurality of digital certificates.
18. The non-transitory computer-readable storage device of claim 17 , the processing device to search the data store using the first digital certificate requirement to identify one or more profiles comprising at least one of an intrinsic attribute or a derived attribute matching the first digital certificate requirement.
19. The non-transitory computer-readable storage device of claim 14 , the processing device to:
generate a first derived attribute of the set of second attributes; and
generate a second derived attribute based at least in part on the first derived attribute.
20. The non-transitory computer-readable storage device of claim 14 , the processing device to:
receive, from the customer system, a selection of the first digital certificate from the list; and
provide the first digital certificate to the customer system.