11 results about "Proxy certificate" patented technology

The disclosed technology teaches a method of operating an inspection proxy for encrypted sessions between users in an organization serviced by the inspection proxy and cloud-based services accessed by the users. The method comprises providing the inspection proxy comprising an intermediate certificate authority that holds a certificate authority (CA) certificate that browsers, operated by the users in the organization, recognize to be authorized to sign end-entity certificates, by virtue of being chained to a root certificate recognized by the browsers.

Devices, networks, systems, methods, and processes for traffic analysis are described herein. A device may receive an enhanced NetFlow packet comprising a certificate associated with an Initial Data Packet (IDP) of a data stream. The device can, based on the enhanced NetFlow packet, evaluate whether the certificate has expired. If the certificate has expired, the device can forward the data stream to a proxy. The proxy may issue a proxy certificate, thereby facilitating connection when the certificate has expired. The device may dynamically apply one or more remediation processes upon determining that the certificate has expired. The device can monitor expiration dates of one or more certificates. The device can also provide alerts to an operator or to a network device upon expiry of the one or more certificates.

Methods and systems for managing endpoint devices are disclosed. The endpoint devices may be managed by onboarding them. To onboarding the endpoint devices, ownership vouchers and proxy certificates may be used to cryptographically verify to which entities authority over the endpoint devices have been delegated. The proxy certificates may extend certificate and / or delegation chains in ownership vouchers to other devices. The extended chains may eliminate the need for proliferation of keys used to demonstrate authority over endpoint devices.

The invention provides a trusted data sharing certificateless proxy signature method and system based on a block chain. The method comprises the following steps: constructing a trusted data sharing system and a distributed account book by utilizing a block chain technology; a user (signer) obtains a transaction address of a transaction object (verifier) from a trusted data sharing system, and authorizes a proxy signer to sign a data sharing transaction with the verifier on behalf; the proxy signer generates proxy public and private keys by using the proxy certificate, signs the transaction by using the proxy private key, and sends the transaction to the trusted data sharing system; the verifier verifies the correctness of the signature of the related data sharing transaction; verified data transactions and related records are uploaded to a credible data sharing system for whole-network consensus and are registered on an account book. According to the invention, the credible sharing and transaction of data are realized by using the certificateless proxy signature and the block chain technology.

The disclosed technology teaches a method of operating an inspection proxy for encrypted sessions between users in an organization serviced by the inspection proxy and cloud-based services accessed by the users. The method comprises a Hardware Secure Module (HSM) providing, to the inspection proxy comprising an intermediate certificate authority, a signed certificate authority (CA) certificate that browsers, operated by the users in the organization, recognize to be authorized to sign end-entity certificates, by virtue of being chained to a root certificate recognized by the browsers.

Embodiments herein provide a system and method for provisioning a device to use a telecommunications service offered by a provider for a satellite communications (SATCOM) network. The device performs a handshake with the SATCOM network to establish trust, such as by sending an encrypted handshake request to the SATCOM network or operator of the SATCOM network. The SATCOM network acts as a proxy for a satellite network provider and the device communicates with the provider, using information from a proxy certificate for the provider, through the SATCOM network. The device requests and receives an e-SIM profile for the provider. The device also receives a certificate of the satellite network provider and sends a selection or confirmation of an e-SIM profile. The device receives an e-SIM or a configuration corresponding to the selected e-SIM, which is used to access the SATCOM network though the satellite network provider.

The invention discloses a MySQL encrypted traffic dynamic auditing method and device and a medium, and relates to the field of database security, the method comprises the following steps: intercepting a handshake request sent by a client, generating a proxy certificate in real time, and establishing a first handshake connection with the client through the proxy certificate; decrypting the encrypted traffic in a first encryption channel, wherein the first encryption channel is a traffic transmission channel pre-deployed with the client; based on a preset multi-level rule engine, performing level-by-level auditing on the decrypted plaintext traffic; and re-encrypting the audited plaintext traffic, and transmitting the encrypted plaintext traffic to the MySQL server through a second encryption channel, the second encryption channel being a traffic transmission channel pre-deployed with the MySQL server. On the premise of not damaging encrypted communication, complete SQL operation semantics are recorded, a traceable log meeting the requirements of a supervision mechanism is generated, a general query log does not need to be started or an auditing plug-in does not need to be installed at a MySQL server side, and performance loss caused by log writing is avoided.

Embodiments herein provide a system and method for provisioning a device to use a telecommunications service offered by a provider for a satellite communications (SATCOM) network. The device performs a handshake with the SATCOM network to establish trust, such as by sending an encrypted handshake request to the SATCOM network or operator of the SATCOM network. The SATCOM network acts as a proxy for a satellite network provider and the device communicates with the provider, using information from a proxy certificate for the provider, through the SATCOM network. The device requests and receives an e-SIM profile for the provider. The device also receives a certificate of the satellite network provider and sends a selection or confirmation of an e-SIM profile. The device receives an e-SIM or a configuration corresponding to the selected e-SIM, which is used to access the SATCOM network though the satellite network provider.

Embodiments herein provide a system and method for provisioning a device to use a telecommunications service offered by a provider for a satellite communications (SATCOM) network. The device performs a handshake with the SATCOM network to establish trust, such as by sending an encrypted handshake request to the SATCOM network or operator of the SATCOM network. The SATCOM network acts as a proxy for a satellite network provider and the device communicates with the provider, using information from a proxy certificate for the provider, through the SATCOM network. The device requests and receives an e-SIM profile for the provider. The device also receives a certificate of the satellite network provider and sends a selection or confirmation of an e-SIM profile. The device receives an e-SIM or a configuration corresponding to the selected e-SIM, which is used to access the SATCOM network though the satellite network provider.

Devices, networks, systems, methods, and processes for traffic analysis are described herein. A device may receive an enhanced NetFlow packet comprising a certificate associated with an Initial Data Packet (IDP) of a data stream. The device can, based on the enhanced NetFlow packet, evaluate whether the certificate has expired. If the certificate has expired, the device can forward the data stream to a proxy. The proxy may issue a proxy certificate, thereby facilitating connection when the certificate has expired. The device may dynamically apply one or more remediation processes upon determining that the certificate has expired. The device can monitor expiration dates of one or more certificates. The device can also provide alerts to an operator or to a network device upon expiry of the one or more certificates.

A system, apparatus and method for managing trust relationships with legacy nodes in a network of ledger-capable nodes. A first trust relationship is created among a plurality of ledger-capable nodes in the form of a permissioned mission channel. A second trust relationship is created among some of the ledger-capable nodes of the mission channel in a permissioned candidate channel. One of the ledger-capable nodes of the mission channel is selected as a trust manager for the candidate channel. The selected ledger-capable node establishes a third trust relationship with a legacy node based on a common, root certificate authority, and then another ledger-capable node establishes a fourth trust relationship with the legacy node based on the first ledger-capable node acting as a proxy certificate authority for the root certificate authority.