IP Library Granted Patent US 7,877,784
Granted Patent B2
US 7,877,784 · App. 11/811,235 · Granted Jan 25, 2011

Verifying authenticity of webpages

Assignee: Alcatel Lucent
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,877,784
App. No.
11/811,235
Granted
Jan 25, 2011
Kind
B2
Abstract

A certificate registry system is configured to issue authentication certificates issued to each one of a plurality of information providers and to maintain a root certificate corresponding to all of the authentication certificates. Each one of the authentication certificates links respective authentication information thereof to identification information of a corresponding one of the information providers. Each one of the authentication certificates is devoid of linkage between the corresponding one of the information providers and domain name information thereof. The authentication certificates of the certificate registry are associated in a manner at least partially dependent upon at least one of a particular type of information that the information providers provide, a particular organization that the information providers are associated with, a particular type profession in which the information providers are engaged and a particular geographical region in which the information providers are located.

Claims (49)

1. A method, comprising:

creating a certificate registry including authentication certificates issued to each one of a plurality of information providers and a root certificate corresponding to all of said authentication certificates, wherein each one of said authentication certificates links respective authentication information thereof to identification information of a corresponding one of said information providers, wherein each one of said authentication certificates is devoid of linkage between the corresponding one of said information providers and domain name information thereof, and wherein said authentication certificates of the certificate registry are associated in a manner at least partially dependent upon at least one of a particular type of information that said information providers provide, a particular organization that said information providers are associated with, a particular type profession in which said information providers are engaged and a particular geographical region in which said information providers are located;

providing the root certificate to an information recipient; and

facilitating verification of a webpage accessed by the information recipient and having an authentication certificate associated therewith, wherein said verification includes successfully verifying authenticity of said associated authentication certificate using authentication information contained in the root certificate thereby verifying that said associated authentication certificate belongs to the certificate registry and, after said successfully verifying authenticity of said associated authentication certificate, successfully verifying identity of a designated owner of the webpage using authentication information contained in said associated authentication certificate.

2. The method of claim 1 wherein said identification information includes at least one of a name by which a respective one of said information providers is recognized, an image specific to a respective one of said information providers, text specific to a respective one of said information providers, and a sound specific to a respective one of said information providers.

3. The method of claim 1 wherein said identification information includes at least one of a protected name of a respective one of said information providers, a protected image of a respective one of said information providers, protected text of a respective one of said information providers, and protected sound of a respective one of said information providers.

4. The method of claim 1 wherein:

providing the root certificate to the information recipient is performed in response to the information recipient expressly requesting the root certificate; and

the root certificate corresponds to at least one of a particular type of information, a particular organization, a particular type profession and a particular geographical region.

5. The method of claim 4 wherein said identification information includes at least one of a protected name of a respective one of said information providers, a protected image of a respective one of said information providers, protected text of a respective one of said information providers, and protected sound of a respective one of said information providers.

6. The method of claim 4 wherein facilitating verification of the webpage accessed by the information recipient includes:

retrieving said associated authentication certificate from a web server;

verifying that the web server has a matching key to the authentication certificate; and

acknowledging authenticity of the webpage in response to determining that the authentication certificate is valid and that the web server has the matching key thereby verifying that a web page communicating channel between the web server and the information recipient is authentic.

7. The method of claim 4 wherein:

facilitating verification of the webpage accessed by the information recipient includes retrieving a file representing the webpage from a web server;

the file includes a serial number of the webpage and said associated authentication certificate;

verifying that the file was sent from the web server and that the web server has a matching key to the authentication certificate includes:

sending the serial number to the web server,

receiving a checksum of the file from the server that is signed with a private key of the authentication certificate; and

determining if the confirmation checksum received from the server matches that, of a checksum created using the received file; and

determining if the authentication certificate is signed by the private key of the root certificate.

8. The method of claim 7 wherein the file designates an authentication certificate associated with the webpage.

9. The method of claim 8 , further comprising:

caching said associated authentication certificate after retrieving said associated authentication certificate, thereby precluding repeated retrieval of said authentication certificate.

10. A certificate registry, comprising:

authentication certificates issued to each one of a plurality of information providers; and

a root certificate corresponding to all of said authentication certificates;

wherein each one of said authentication certificates links respective authentication information thereof to identification information of a corresponding one of said information providers;

wherein each one of said authentication certificates is devoid of linkage between the corresponding one of said information providers and domain name information thereof; and

wherein said authentication certificates of the certificate registry which is stored on a tangible computer readable storage medium are associated in a manner at least partially dependent upon at least one of a particular type of information that said information providers provide, a particular organization that said information providers are associated with, a particular type profession in which said information providers are engaged and a particular geographical region in which said information providers are located.

11. The registry of claim 10 wherein said identification information includes at least one of a name by which a respective one of said information providers is recognized, an image specific to a respective one of said information providers, text specific to a respective one of said information providers, and a sound specific to a respective one of said information providers.

12. The registry of claim 10 wherein said identification information includes at least one of a protected name of a respective one of said information providers, a protected image of a respective one of said information providers, protected text of a respective one of said information providers, and protected sound of a respective one of said information providers.

13. A certificate registry system configured to: issue authentication certificates issued to each one of a plurality of information providers and maintain a root certificate corresponding to all of said authentication certificates, wherein each one of said authentication certificates links respective authentication information thereof to identification information of a corresponding one of said information providers, wherein each one of said authentication certificates is devoid of linkage between the corresponding one of said information providers and domain name information thereof, and wherein said authentication certificates of the certificate registry system which is stored on a tangible computer readable storage medium are associated in a manner at least partially dependent upon at least one of a particular type of information that said information providers provide, a particular organization that said information providers are associated with, a particular type profession in which said information providers are engaged and a particular geographical region in which said information providers are located.

14. The certificate registry system of claim 13 wherein said identification information includes at least one of a name by which a respective one of said information providers is recognized, an image specific to a respective one of said information providers, text specific to a respective one of said information providers, and a sound specific to a respective one of said information providers.

15. The certificate registry system of claim 13 wherein said identification information includes at least one of a protected name of a respective one of said information providers, a protected image of a respective one of said information providers, protected text of a respective one of said information providers, and protected sound of a respective one of said information providers.

16. The certificate registry system of claim 13 further configured to provide the root certificate to an information recipient in response to the information recipient expressly requesting the root certificate, wherein the root certificate corresponds to at least one of a particular type of information, a particular organization, a particular type profession and a particular geographical region.

17. The certificate registry system of claim 16 wherein said identification information includes at least one of a protected name of a respective one of said information providers, a protected image of a respective one of said information providers, protected text of a respective one of said information providers, and protected sound of a respective one of said information providers.

18. The certificate registry system of claim 17 further configured to facilitating verification of a webpage accessed by the information recipient and having an authentication certificate associated therewith, wherein said verification includes successfully verifying authenticity of said associated authentication certificate using authentication information contained in the root certificate thereby verifying that said associated authentication certificate belongs to the certificate registry and, after said successfully verifying authenticity of said associated authentication certificate, successfully verifying identity of a designated owner of the webpage using authentication information contained in said associated authentication certificate.

19. The certificate registry system of claim 18 wherein facilitating verification of the webpage accessed by the information recipient includes:

retrieving said associated authentication certificate from a web server;

verifying that the web server has a matching key to the authentication certificate; and

acknowledging authenticity of the webpage in response to determining that the authentication certificate is valid and that, the web server has the matching key thereby verifying that a web page communicating channel between the web server and the information recipient is authentic.

20. The certificate registry system of claim 18 wherein:

facilitating verification of the webpage accessed by the information recipient includes retrieving a file representing the webpage from a web server,

the file includes a serial number of the webpage and said associated authentication certificate;

verifying that the file was sent from the web server and that the web server has a matching key to the authentication certificate includes sending the serial number to the server, receiving a checksum of the file from the server that is signed with a private key of the authentication certificate, determining if the confirmation checksum received from the server matches that of a checksum created using the received file, and determining if the authentication certificate is signed by the private key of the root certificate.

21. The certificate registry system of claim 20 wherein the file designates an authentication certificate associated with the webpage.

22. The certificate registry system of claim 20 further configured to cache said associated authentication certificate after retrieving said associated authentication certificate, thereby precluding repeated retrieval of said authentication certificate.

Assignments (5)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 29, 2020
From: SOUND VIEW INNOVATIONS, LLC
To: PIECE FUTURE PTE LTD
Reel/Frame 052519/0440 →
RELEASE OF SECURITY INTEREST Recorded Sep 30, 2014
From: CREDIT SUISSE AG
To: ALCATEL LUCENT
Reel/Frame 033868/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 25, 2014
From: ALCATEL LUCENT
To: SOUND VIEW INNOVATIONS, LLC
Reel/Frame 033416/0763 →
SECURITY AGREEMENT Recorded Jan 30, 2013
From: ALCATEL LUCENT
To: CREDIT SUISSE AG
Reel/Frame 029821/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 7, 2007
From: CHOW, STANLEY; SMITH, JEFF; GUSTAVE, CHRISTOPHE
To: ALCATEL LUCENT
Reel/Frame 019482/0695 →
Continuity (1)
Related Publication 20080307222A1 · Dec 11, 2008