Is a
Patent attributes
Current Assignee
Patent Jurisdiction
Patent Number
Patent Inventor Names
Kevin M. Tambascio0
Edward R. Shorter0
Gary A. Galehouse0
Wayne A. Harris0
Date of Patent
June 3, 2014
0Patent Application Number
137628900
Date Filed
February 8, 2013
0Patent Citations Received
Patent Primary Examiner
Patent abstract
A system and method for validating SCEP certificate enrollment that enforces the pairing of a SCEP challenge password and a set of expected certificate request content. A SCEP Validation Service or software residing in another system component whether a certificate request is legitimate by comparing it to registered SCEP challenges and associated expected certificate request content. This system and method addresses a privilege-escalation vulnerability in prior SCEP-based systems that could lead to a practical attack.
Timeline
No Timeline data yet.
Further Resources
No Further Resources data yet.