System and method for the secure enrollment of devices with a clearinghouse server for internet telephony and multimedia communications
Enrolling devices with a clearinghouse server for Internet telephony and multimedia communications. Enrollment can be the process of taking a network device (such as a router, gateway, gatekeeper, etc.) and exchanging encrypted information with the clearinghouse server, so that later communications with that device can be secured. The enrollment is done with levels of security and verification that ensures the devices and clearinghouse server is legitimate.
1. A method for a clearinghouse or routing policy server to securely enroll a client device for an Internet transaction system, comprising the steps:
receiving a first message in a computer readable medium from a client Internet device that comprises an automated request to obtain an identity of one of an Internet transaction clearinghouse and Internet transaction policy server, the request further comprising an automated computer programming variable operation that is set equal to one of alphanumeric text and binary code, comprising ‘getcacert’ and that initiates a search for a certificate authority certificate;
responding to the request by transmitting a second message comprising the certificate authority certificate of one of an Internet transaction clearinghouse and Internet transaction policy;
receiving a third message comprising a certificate request from the client Internet transaction device;
responding to the client Internet device request by signing the certificate; and
transmitting a fourth message comprising the certificate signed by a certificate authority of one of the Internet transaction clearinghouse and the Internet transaction policy server, such that the client Internet device is enrolled in the Internet transaction system after transmission of the fourth message and wherein the clearinghouse or routing policy server is able to communicate securely with the client Internet device after transmission of the fourth message.
2. The method of claim 1 , wherein the second message comprises a programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘0&certificate’.
3. The method of claim 1 , wherein the third message further comprises a computer programming variable operation that is set equal to at least one of a nonce value, a user's name, a user's password, an Internet device identifier, a customer identifier, and a certificate request to be signed.
4. The method of claim 1 , wherein the fourth message further comprises a computer programming variable entitled status that is set equal to one of alphanumeric text and binary code, comprising ‘0&certificate’.
5. A method for an Internet transaction clearinghouse or Internet transaction policy server to securely enroll a client Internet device for an Internet communication system, comprising the steps:
receiving a first message in a computer readable medium from a client Internet device that comprises an automated request to obtain an identity of one of an Internet transaction clearinghouse and Internet transaction policy server;
responding to the automated request by transmitting a second message comprising a certificate authority certificate of one of an Internet transaction clearinghouse and Internet transaction policy server to the client Internet device;
receiving a third message comprising a certificate request from the client Internet device, the certificate request comprising a nonce value, a user's name, a user's password, a Internet device identifier, a customer identifier, and a certificate request to be signed;
responding to the client Internet device request by signing the certificate; and
transmitting a fourth message comprising the certificate signed by the certificate authority of one of the Internet transaction clearinghouse and Internet transaction policy server, such that the client Internet device is enrolled in the Internet communication system after transmission of the fourth message and wherein the Internet transaction clearinghouse or Internet transaction policy server is able to communicate securely with the client Internet device after transmission of the fourth message.
6. The method of claim 5 , wherein the first message further comprises a computer programming variable entitled operation that is set equal to one of alphanumeric text and binary code, comprising ‘getcacert’ that initiates a search for a certificate authority certificate.
7. The method of claim 5 , wherein the first message further comprises a POST message received via HTTP.
8. The method of claim 5 , wherein the second message further comprises a certificate authority certificate.
9. The method of claim 5 , wherein the second message further comprises a programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘0&certificate’.
10. The method of claim 5 , wherein the fourth message further comprises a computer programming variable entitled status that is set equal to one of alphanumeric text and binary code, comprising ‘0&certificate’.
11. A method for a Internet transaction clearinghouse or Internet transaction policy server to securely enroll a client Internet device for an Internet communications system, comprising the steps:
receiving a first message in a computer readable medium from a client Internet device that comprises an automated request to obtain an identity one of an Internet transaction clearinghouse and Internet transaction policy server;
responding to the request by transmitting a second message comprising a certificate authority certificate of one of an Internet transaction clearinghouse and an Internet transaction policy server to the client Internet device, wherein the second message comprises a programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘0&certificate’ that indicates certificate authority information follows the alphanumeric text, or binary code;
receiving a third message comprising a certificate request from the client Internet device comprising a certificate request to be signed;
responding to the client Internet device request by signing the certificate; and
transmitting a fourth message comprising the certificate signed by the certificate authority of one of the Internet transaction clearinghouse and Internet transaction policy server, such that the client Internet device is enrolled in the Internet communications system after transmission of the fourth message and wherein the Internet transaction clearinghouse or Internet transaction policy server is able to communicate securely with the client Internet device after transmission of the fourth message.
12. The method of claim 11 , wherein the first message further comprises an automated computer programming variable operation that is set equal to one of alphanumeric text and binary code, comprising getcacert that initiates a search for a certificate authority certificate.
13. The method of claim 11 , wherein the first message further comprises a POST message received via HTTP.
14. The method of claim 11 , wherein the second message further comprises the certificate authority certificate.
15. The method of claim 11 , wherein the third message further comprises a computer programming variable operation that is set equal to at least one of a nonce value, a user's name, a user's password, an Internet device identifier, a customer identifier, and a certificate request to be signed.
16. The method of claim 11 , wherein the fourth message further comprises a computer programming variable status that is set equal to one of alphanumeric text and binary code, comprising ‘0&certificate’.