Usage restrictions for digital certificates
A method, a computer program product, and a system for usage restrictions on digital certificates. The method includes selecting a digital certificate relating to a user and determining a usage restriction policy for the digital certificate based on the user. The method also includes populating an extension field of the digital certificate with the usage restriction policy. The method further includes providing the digital certificate including the usage restriction policy to the user. The method also includes gathering parameters relating to the digital certificate, determining usage patterns based on the parameters, inputting the usage patterns into a machine learning model, outputting a risk assessment, and updating the usage restriction policy based on the risk assessment.
1. A computer-implemented method comprising:
selecting a digital certificate relating to a user;
determining a usage restriction policy for the digital certificate based on the users;
populating an extension field of the digital certificate with the usage restriction policy;
providing the digital certificate including the usage restriction policy to the user;
detecting a violation of the usage restriction policy; and
recording the violation in another extension field of the digital certificate.
2. The computer-implemented method of claim 1 , further comprising:
receiving, from an entity, a new usage restriction policy relating to the entity; and
populating a second extension field of the digital certificate with the new usage restriction policy.
3. The computer-implemented method of claim 1 , wherein the usage restriction policy restricts the digital certificate to a specific time period when the digital certificate is valid.
4. The computer-implemented method of claim 1 , wherein the usage restriction policy restricts the digital certificate to specific days when the digital certificate is valid.
5. The computer-implemented method of claim 1 , wherein the usage restriction policy restricts the digital certificate to specific entities the digital certificate is valid for.
6. The computer-implemented method of claim 1 , wherein the usage restriction policy applies the usage restrictions on a per-entity basis.
7. The computer-implemented method of claim 1 , wherein the usage restriction policy applies usage restrictions during a validity period of the digital certificate.
8. A computer program product comprising:
one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising instructions configured to cause one or more processors to:
select a digital certificate relating to a user;
determine a usage restriction policy for the digital certificate based on the user;
populate an extension field of the digital certificate with the usage restriction policy; and
provide the digital certificate including the usage restriction policy to the user;
detecting a violation of the usage restriction policy; and
recording the violation in another extension field of the digital certificate.
9. The computer program product of claim 8 , further comprising additional program instructions further configured to cause the one or more processors to:
receive, from an entity, a new usage restriction policy relating to the entity; and
populate a second extension field of the digital certificate with the new usage restriction policy.
10. The computer program product of claim 8 , wherein the usage restriction policy restricts the digital certificate to a specific time period when the digital certificate is valid.
11. The computer program product of claim 8 , wherein the usage restriction policy restricts the digital certificate to specific days when the digital certificate is valid.
12. The computer program product of claim 8 , wherein the usage restriction policy restricts the digital certificate to specific entities the digital certificate is valid for.
13. The computer program product of claim 8 , wherein the usage restriction policy applies restrictions on a per-entity basis.
14. The computer program product of claim 8 , wherein the usage restriction policy applies usage restrictions during a validity period of the digital certificate.
15. A system comprising:
one or more processors; and
one or more computer-readable storage media storing program instructions, wherein the program instructions are configured to be executed by the one or more processors to cause the one or more processors to perform a method comprising:
selecting a digital certificate relating to a user;
determining a usage restriction policy for the digital certificate based on the user;
populating an extension field of the digital certificate with the usage restriction policy;
providing the digital certificate including the usage restriction policy to the user;
detecting a violation of the usage restriction policy; and
recording the violation in another extension field of the digital certificate.
16. The system of claim 15 , further comprising additional program instructions configured to cause the one or more processors to perform the method further comprising:
receiving, from an entity, a new usage restriction policy relating to the entity; and
populating a second extension field of the digital certificate with the new usage restriction policy.
17. The system of claim 15 , wherein the usage restriction policy restricts the digital certificate to a specific time period when the digital certificate is valid.
18. The system of claim 15 , wherein the usage restriction policy restricts the digital certificate to specific days when the digital certificate is valid.
19. The system of claim 15 , wherein the usage restriction policy restricts the digital certificate to specific entities the digital certificate is valid for.
20. The system of claim 15 , wherein the usage restriction policy applies the usage restrictions on a per-entity basis.