IP Library Granted Patent US 11,604,659
Granted Patent B2
US 11,604,659 · App. 16/601,291 · Granted Mar 14, 2023

Automated propagation of server configuration on a server cluster

Inventor: Alok Naik (Bangalore, IN)
Assignee: DigiCert, Inc.
G06F9/44505G06F1/32H04L9/0825H04L9/0891H04L9/3268
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,604,659
App. No.
16/601,291
Granted
Mar 14, 2023
Kind
B2
Abstract

Techniques are disclosed to automate secure propagation of a configuration to a plurality of servers in a server cluster. For example, the techniques may include a method. The method may include receiving, at a first computing device, a first public key associated with a target computing device, the first computing device having an updated configuration. The method may further include encrypting, at the first computing device, the updated configuration using the first public key. The method may further include sending the encrypted configuration to the target computing device. The method may further include decrypting, at the target computing device, the encrypted configuration using a first private key associated with the target computing device, wherein the first public key and the first private key are a first keypair associated with the target computing device. The method may further include updating the target computing device with the updated configuration.

Claims (92)

1. A computer-implemented method for updating at least one computing device of a plurality of computing devices, the method comprising:

obtaining, at a first computing device, a digital certificate, a key associated with the digital certificate, a first public key associated with a second computing device, and a second public key associated with a third computing device, wherein the second computing device comprises an intermediary computing device;

determining that the first computing device is unable to directly communicate with the third computing device;

encrypting the digital certificate and the key associated with the digital certificate using the first public key to form a first encrypted digital certificate and a first encrypted key;

sending the first encrypted digital certificate and the first encrypted key to the second computing device based at least in part on determining that the first computing device is unable to directly communicate with the third computing device, wherein the second computing device is updated with the digital certificate and the key associated with the digital certificate;

encrypting the digital certificate and the key associated with the digital certificate using the second public key to form a second encrypted digital certificate and a second encrypted key; and

sending the second encrypted digital certificate and the second encrypted key to the third computing device, wherein the third computing device is updated with the digital certificate and the key associated with the digital certificate.

2. The method of claim 1 , wherein the second computing device decrypts the first encrypted digital certificate and the first encrypted key using a first private key associated with the first public key.

3. The method of claim 1 , wherein encrypting the digital certificate and the key associated with the digital certificate using the first public key comprises;

encrypting, by the first computing device, the digital certificate and the key associated with the digital certificate using the first public key to form the first encrypted digital certificate and the first encrypted key, and

wherein encrypting the digital certificate and the key associated with the digital certificate using the second public key comprises:

encrypting, by the first computing device, the digital certificate and the key associated with the digital certificate using the second public key associated with the third computing device to form the second encrypted digital certificate and the second encrypted key.

4. The method of claim 1 , wherein encrypting the digital certificate and the key associated with the digital certificate using the first public key comprises:

encrypting, by the first computing device, the digital certificate and the key associated with the digital certificate using the first public key to form the first encrypted digital certificate and the first encrypted key, and

wherein encrypting the digital certificate and the key associated with the digital certificate using the second public key comprises:

encrypting, by the second computing device, the digital certificate and the key associated with the digital certificate using the second public key associated with the third computing device to form the second encrypted digital certificate and the second encrypted key.

5. The method of claim 1 , wherein the first computing device is updated with the digital certificate and the key associated with the digital certificate.

6. A first computing device, the first computing device comprising:

memory; and

a processor communicatively coupled to the memory and configured to:

obtain a digital certificate, a key associated with the digital certificate, a first public key associated with a second computing device, and a second public key associated with a third computing device, wherein the second computing device comprises an intermediary computing device;

encrypt the digital certificate and the key associated with the digital certificate using the first public key to form a first encrypted digital certificate and a first encrypted key;

send the first encrypted digital certificate and the first encrypted key to the second computing device, wherein the second computing device is updated with the digital certificate and the key associated with the digital certificate;

encrypt the digital certificate and the key associated with the digital certificate using the second public key to form a second encrypted digital certificate and a second encrypted key; and

send, by the second computing device, the second encrypted digital certificate and the second encrypted key to the third computing device based at least in part on determining that the first computing device is unable to directly communicate with the third computing device, wherein the third computing device is updated with the digital certificate and the key associated with the digital certificate.

7. The first computing device of claim 6 , wherein the processor comprises a first processor, wherein the second computing device comprises a second processor, wherein the second processor is configured to decrypt the first encrypted digital certificate and the first encrypted key using a first private key associated with the first public key.

8. The first computing device of claim 6 , wherein the processor comprises a first processor, wherein the third computing device comprises a second processor, wherein the second processor is configured to decrypt the second encrypted digital certificate and the second encrypted key using a second private key associated with the first public key.

9. The first computing device of claim 6 , wherein the processor is further configured to update the first computing device with the digital certificate and the key associated with the digital certificate.

10. The first computing device of claim 6 , wherein the processor is further configured to, for each of a plurality of third public keys:

encrypt the digital certificate and the key associated with the digital certificate using a third public key to form a particular encrypted digital certificate and a particular encrypted key; and

send the particular encrypted digital certificate and the particular encrypted key to a particular computing device associated with the third public key, wherein the particular computing device is updated with the digital certificate and the key associated with the digital certificate.

11. A non-transitory computer-readable medium comprising computer-executable instructions that, when executed by a first computing device, cause the first computing device to:

obtain a digital certificate, a key associated with the digital certificate, a first public key associated with a second computing device, and a second public key associated with a third computing device;

identify peak load times for the second computing device and the third computing device;

determine a sequence by which to update the second computing device and the third computing device based on the peak load times; and

encrypt the digital certificate and the key associated with the digital certificate using the first public key to form first encrypted data;

send, in the determined sequence, the first encrypted data to the second computing device, wherein the second computing device is updated with the digital certificate and the key associated with the digital certificate;

encrypt the digital certificate and the key associated with the digital certificate using the second public key to form second encrypted data; and

send, in the determined sequence, the second encrypted data to the third computing device, wherein the third computing device is updated with the digital certificate and the key associated with the digital certificate.

12. The non-transitory computer-readable medium of claim 11 , wherein the second computing device is configured to decrypt the first encrypted data using a first private key associated with the second computing device.

13. The non-transitory computer-readable medium of claim 11 , wherein execution of the computer-executable instructions by the first computing device, further causes the first computing device to update the first computing device with the digital certificate and the key associated with the digital certificate.

14. The non-transitory computer-readable medium of claim 11 , wherein the third computing device is configured to decrypt the second encrypted data using a second private key associated with the third computing device.

15. The non-transitory computer-readable medium of claim 11 , wherein the second computing device is configured to:

encrypt the digital certificate and the key associated with the digital certificate using a third public key associated with a fourth computing device to form third encrypted data; and

send the third encrypted data to the fourth computing device, wherein the fourth computing device is updated with the digital certificate and the key associated with the digital certificate.

16. The non-transitory computer-readable medium of claim 11 , wherein to send the first encrypted data to the second computing device, execution of the computer-executable instructions by the first computing device, further causes the first computing device to:

determine that the first computing device is unable to directly communicate with the second computing device; and

based on determining the first computing device is unable to directly communicate with the second computing device, send the first encrypted data through an intermediary device, wherein to send the first encrypted data through the intermediary device, execution of the computer-executable instructions by the first computing device, further causes the first computing device to:

encrypt the first encrypted data to generate further encrypted data using a third public key associated with the intermediary device, and

send the further encrypted data to the intermediary device,

wherein the intermediary device is configured to:

decrypt the further encrypted data using a third private key associated with intermediary device, and

send the first encrypted data to the second computing device.

17. The non-transitory computer-readable medium of claim 11 , wherein execution of the computer-executable instructions by the first computing device, further causes the first computing device to update each of a plurality of computing devices with the digital certificate and the key associated with the digital certificate.

18. The non-transitory computer-readable medium of claim 17 , wherein execution of the computer-executable instructions by the first computing device, further causes the first computing device to generate a plurality of encrypted digital certificates and a plurality of encrypted keys based at least in part on encrypting the digital certificate and the key associated with the digital certificate using each public key of a plurality of public keys associated with the plurality of computing devices.

19. The non-transitory computer-readable medium of claim 11 , wherein the determined sequence comprises a sequence by which to update a plurality of computing devices based on peak load times of the plurality of computing devices, wherein the plurality of computing devices comprise the second computing device, the third computing device, and a fourth computing device, wherein execution of the computer-executable instructions by the first computing device, further causes the first computing device to:

send, in the determined sequence, an encrypted digital certificate and an encrypted key to each computing device of the plurality of computing devices.

20. The method of claim 1 ,

wherein encrypting the digital certificate and the key associated with the digital certificate using the second public key comprises encrypting, by the second computing device, the digital certificate and the key associated with the digital certificate using the second public key, wherein sending the second encrypted digital certificate and the second encrypted key to the third computing device comprises sending by the second computing device the second encrypted digital certificate and the second encrypted key to the third computing device.

21. A first computing device, the first computing device comprising:

memory; and

a first processor communicatively coupled to the memory and configured to:

obtain a digital certificate, a key associated with the digital certificate, a first public key associated with a second computing device, and a second public key associated with an intermediary computing device;

encrypt the digital certificate and the key associated with the digital certificate using a first public key associated with a second computing device to form a first encrypted digital certificate and a first encrypted key;

encrypt the first encrypted digital certificate and the first encrypted key using the second public key to form a second encrypted digital certificate and a second encrypted key based at least in part on determining that the first computing device is unable to directly communicate with the second computing device; and

send the second encrypted digital certificate and the second encrypted key to the intermediary computing device, wherein the intermediary computing device comprises a second processor, wherein the second processor is configured to:

decrypt the second encrypted digital certificate and the second encrypted key using a second private key associated with the intermediary computing device, and

send the first encrypted digital certificate and the first encrypted key to the second computing device.

22. A first computing device, the first computing device comprising:

memory; and

a first processor communicatively coupled to the memory and configured to:

obtain a digital certificate, a key associated with the digital certificate, a first public key associated with an intermediary computing device, and a second public key associated with a second computing device;

encrypt the digital certificate and the key associated with the digital certificate using the first public key to form a first encrypted digital certificate and a first encrypted key; and

send the first encrypted digital certificate and the first encrypted key to the intermediary computing device based at least in part on determining that the first computing device is unable to directly communicate with the second computing device, wherein the intermediary computing device comprises a second processor, wherein the second processor is configured to:

decrypt the first encrypted digital certificate and the first encrypted key using a private key associated with the intermediary computing device to form the digital certificate and the key associated with the digital certificate,

encrypt the digital certificate and the key associated with the digital certificate using the second public key to form a second encrypted digital certificate and a second encrypted key, and

send the second encrypted digital certificate and the second encrypted key to the second computing device, wherein the second computing device is updated with the digital certificate and the key associated with the digital certificate.

23. A first computing device, the first computing device comprising:

memory; and

a processor communicatively coupled to the memory and configured to:

obtain a digital certificate, a key associated with the digital certificate, and a plurality of public keys, each public key of the plurality of public keys corresponding to a particular second computing device of a plurality of second computing devices; and

for each public key of the plurality of public keys:

encrypt the digital certificate and the key associated with the digital certificate using the public key to form an encrypted digital certificate and an encrypted key, and

send the encrypted digital certificate and the encrypted key to a second computing device of the plurality of second computing devices based at least in part on determining that the first computing device is unable to directly communicate with a third computing device, the second computing device corresponding to the public key, wherein the second computing device is updated with the digital certificate and the key associated with the digital certificate, wherein the second computing device is an intermediary computing device, wherein the second computing device routes a further encrypted digital certificate and a further encrypted key based on the digital certificate and the key to the third computing device.

24. A first computing device, the first computing device comprising:

memory; and

a processor communicatively coupled to the memory and configured to:

obtain a digital certificate, a key associated with the digital certificate, and a first public key associated with a second computing device of a plurality of computing devices;

encrypt the digital certificate and the key associated with the digital certificate using the first public key to form a first encrypted digital certificate and a first encrypted key;

identify peak load times for each computing device of a plurality of computing devices;

determine a sequence by which to update the plurality of computing devices based on the peak load times; and

send, in the determined sequence, an encrypted digital certificate and an encrypted key to each computing device of the plurality of computing devices, wherein sending the encrypted digital certificate and the encrypted key to each computing device of the plurality of computing devices comprises sending the first encrypted digital certificate and the first encrypted key to the second computing device.

Assignments (2)
FIRST LIEN INTELLECTUAL PROPERTY AGREEMENT SUPPLEMENT Recorded Sep 24, 2025
From: DIGICERT, INC.
To: HPS INVESTMENT PARTNERS, LLC, AS COLLATERAL AGENT
Reel/Frame 072947/0203 →
SECOND LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT SUPPLEMENT Recorded Jul 30, 2025
From: DIGICERT, INC.
To: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
Reel/Frame 072295/0001 →