Authentication Certificate Renewal via Validation Server Extension

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing authentication certificate systems lack the ability to issue certificates for a limited time, as they are either non-renewable or renewable for an unlimited time, which can lead to security and management issues.

Innovation Solution

Implementing a certificate extension that includes origination information, allowing for the issuance and renewal of authentication certificates with customizable validity periods, enabling secure and managed access by appending an extension to the authentication certificate request and validating it through a validation server and certificate authority.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If certificates are made renewable for unlimited time, then authentication flexibility is improved, but security and management control deteriorate

Engineering Contradiction:

Improveauthentication flexibilityVSAvoidsecurity and management control

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces dynamic validity periods for authentication certificates, allowing the certificate to be valid only for a specified duration rather than indefinitely. This dynamic approach enables the system to adapt to changing security requirements while maintaining controlled flexibility in authentication timing.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent changes the parameter of certificate validity from unlimited to limited time periods. By introducing a validity period parameter that can be configured, the system achieves both flexibility in authentication timing and security through time-limited access, resolving the contradiction between adaptability and reliability.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If certificates are made non-renewable, then security and management control are improved, but authentication flexibility and convenience deteriorate

Engineering Contradiction:

Improvesecurity and management controlVSAvoidauthentication flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent makes the certificate system dynamic by allowing renewal within a defined validity period. This enables the system to maintain security through time-limited certificates while providing flexibility through the ability to renew before expiration, thus resolving the contradiction between security and flexibility.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent allows certificates to be renewed in advance before their validity period expires. This preliminary renewal action ensures continuous authentication capability while maintaining security, as the certificate must be actively renewed rather than automatically extending indefinitely.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If limited-time certificates are issued, then security and management control are improved, but system complexity increases

Engineering Contradiction:

Improvesecurity and management controlVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a validation server as an intermediary component that handles the complexity of validating certificate validity periods and managing renewals. This intermediary absorbs the system complexity, allowing the core authentication system to maintain simplicity while benefiting from enhanced security through limited-time certificates.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements a feedback mechanism where the validation server checks the current time against the certificate's validity period and returns appropriate responses. This feedback loop manages the complexity of time-based validation automatically, reducing the burden on the main authentication system while maintaining security.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS9401911B2One-time password certificate renewal

Publication Date: 2016.07.26 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

Embodiments are directed to providing a certificate extension to an authentication certificate, to validating an authentication certificate request and to implementing authentication certificates that include certificate extensions. In an embodiment, a computer system accesses an authentication certificate request that is to be sent to a validation server for validation and to a certificate authority for issuance of an authentication certificate. The computer system appends an extension to the authentication certificate request. The extension includes origination information about the authentication certificate. The computer system then sends the authentication certificate request with the appended extension to the validation server for validation.