8 results about "Proxy certificate" patented technology

The disclosed technology teaches a method of operating an inspection proxy for encrypted sessions between users in an organization serviced by the inspection proxy and cloud-based services accessed by the users. The method comprises providing the inspection proxy comprising an intermediate certificate authority that holds a certificate authority (CA) certificate that browsers, operated by the users in the organization, recognize to be authorized to sign end-entity certificates, by virtue of being chained to a root certificate recognized by the browsers.

Methods and systems for managing endpoint devices are disclosed. The endpoint devices may be managed by onboarding them. To onboarding the endpoint devices, ownership vouchers and proxy certificates may be used to cryptographically verify to which entities authority over the endpoint devices have been delegated. The proxy certificates may extend certificate and / or delegation chains in ownership vouchers to other devices. The extended chains may eliminate the need for proliferation of keys used to demonstrate authority over endpoint devices.

The invention provides a trusted data sharing certificateless proxy signature method and system based on a block chain. The method comprises the following steps: constructing a trusted data sharing system and a distributed account book by utilizing a block chain technology; a user (signer) obtains a transaction address of a transaction object (verifier) from a trusted data sharing system, and authorizes a proxy signer to sign a data sharing transaction with the verifier on behalf; the proxy signer generates proxy public and private keys by using the proxy certificate, signs the transaction by using the proxy private key, and sends the transaction to the trusted data sharing system; the verifier verifies the correctness of the signature of the related data sharing transaction; verified data transactions and related records are uploaded to a credible data sharing system for whole-network consensus and are registered on an account book. According to the invention, the credible sharing and transaction of data are realized by using the certificateless proxy signature and the block chain technology.

The disclosed technology teaches a method of operating an inspection proxy for encrypted sessions between users in an organization serviced by the inspection proxy and cloud-based services accessed by the users. The method comprises a Hardware Secure Module (HSM) providing, to the inspection proxy comprising an intermediate certificate authority, a signed certificate authority (CA) certificate that browsers, operated by the users in the organization, recognize to be authorized to sign end-entity certificates, by virtue of being chained to a root certificate recognized by the browsers.

Embodiments herein provide a system and method for provisioning a device to use a telecommunications service offered by a provider for a satellite communications (SATCOM) network. The device performs a handshake with the SATCOM network to establish trust, such as by sending an encrypted handshake request to the SATCOM network or operator of the SATCOM network. The SATCOM network acts as a proxy for a satellite network provider and the device communicates with the provider, using information from a proxy certificate for the provider, through the SATCOM network. The device requests and receives an e-SIM profile for the provider. The device also receives a certificate of the satellite network provider and sends a selection or confirmation of an e-SIM profile. The device receives an e-SIM or a configuration corresponding to the selected e-SIM, which is used to access the SATCOM network though the satellite network provider.

Embodiments herein provide a system and method for provisioning a device to use a telecommunications service offered by a provider for a satellite communications (SATCOM) network. The device performs a handshake with the SATCOM network to establish trust, such as by sending an encrypted handshake request to the SATCOM network or operator of the SATCOM network. The SATCOM network acts as a proxy for a satellite network provider and the device communicates with the provider, using information from a proxy certificate for the provider, through the SATCOM network. The device requests and receives an e-SIM profile for the provider. The device also receives a certificate of the satellite network provider and sends a selection or confirmation of an e-SIM profile. The device receives an e-SIM or a configuration corresponding to the selected e-SIM, which is used to access the SATCOM network though the satellite network provider.

Embodiments herein provide a system and method for provisioning a device to use a telecommunications service offered by a provider for a satellite communications (SATCOM) network. The device performs a handshake with the SATCOM network to establish trust, such as by sending an encrypted handshake request to the SATCOM network or operator of the SATCOM network. The SATCOM network acts as a proxy for a satellite network provider and the device communicates with the provider, using information from a proxy certificate for the provider, through the SATCOM network. The device requests and receives an e-SIM profile for the provider. The device also receives a certificate of the satellite network provider and sends a selection or confirmation of an e-SIM profile. The device receives an e-SIM or a configuration corresponding to the selected e-SIM, which is used to access the SATCOM network though the satellite network provider.

A system, apparatus and method for managing trust relationships with legacy nodes in a network of ledger-capable nodes. A first trust relationship is created among a plurality of ledger-capable nodes in the form of a permissioned mission channel. A second trust relationship is created among some of the ledger-capable nodes of the mission channel in a permissioned candidate channel. One of the ledger-capable nodes of the mission channel is selected as a trust manager for the candidate channel. The selected ledger-capable node establishes a third trust relationship with a legacy node based on a common, root certificate authority, and then another ledger-capable node establishes a fourth trust relationship with the legacy node based on the first ledger-capable node acting as a proxy certificate authority for the root certificate authority.