Stephen D Moore

US Patent:

8327142, Dec 4, 2012

Filed:

Feb 5, 2007

Appl. No.:

11/702371

Inventors:

Craig Lund - Irvine CA, US
Garret Grajek - Huntington Beach CA, US
Stephen Moore - Portland OR, US

Assignee:

SecureAuth Corporation - Irvine CA

International Classification:

H04L 29/06

US Classification:

713169, 705 67

Abstract:

A method and system for mutually authenticating a client and a server is provided in accordance with an aspect of the present invention. The method commences with transmitting a token from the server to the client. Thereafter, the method continues with establishing a secure data transfer link between the server and the client. A server certificate is transmitted to the client during the establishment of the secure data transfer link. The method continues with transmitting a response packet to the server, which is validated thereby upon receipt. The system includes a client authentication module that initiates the secure data transfer link and transmits the response packet, and a server authentication module that transmits the token and validates the response packet.

US Patent:

20080077791, Mar 27, 2008

Filed:

Jul 23, 2007

Appl. No.:

11/880599

Inventors:

Craig Lund - Irvine CA, US
Garret Grajek - Huntington Beach CA, US
Stephen Moore - Portland OR, US

International Classification:

H04L 9/32

US Classification:

713156

Abstract:

A method and system for secured network access is provided in accordance with the present invention. The method begins with receiving a login request from a client on a router. Thereafter, a certificate transfer instruction for the router to an authentication appliance is generated where the client lacks a copy of a client certificate. The client is authenticated with a challenge-response sequence, the response to which is deliverable through an out-of-band communications channel. Upon authentication, the client certificate and the client private key are transmitted to the client, which are used to authenticate the client to the network.

US Patent:

20090025080, Jan 22, 2009

Filed:

Sep 18, 2008

Appl. No.:

12/212959

Inventors:

Craig Lund - Irvine CA, US
Garret Grajek - Huntington Beach CA, US
Stephen Moore - Portland OR, US
Mark Lambiase - Ladera Ranch CA, US

International Classification:

H04L 29/06

US Classification:

726 15

Abstract:

Authenticating a client to a server accessible through an Internet Protocol Security (IPSec) Virtual Private Network (VPN) appliance. The IPSec VPN appliance and an SSL VPN appliance are configured to receive an initialization command from the client. The SSL VPN appliance is in communication with an authentication appliance for authenticating the client to the server. In response to the initialization command, the authentication appliance generates a client key pair including a client private key and a client public key. The authentication appliance generates a client certificate and a client IPSec profile. The authentication appliance transmits the client key pair, the client certificate and the client IPSec profile to the client. A secure communication session between the client and the server is established. The secure communication session is established through the IPSec VPN appliance. Upon receipt of the IPSec profile, the communication session between the client and the server is encrypted.

US Patent:

20090240936, Sep 24, 2009

Filed:

Mar 20, 2008

Appl. No.:

12/052630

Inventors:

MARK LAMBIASE - Ladera Ranch CA, US
Garret Grajek - Aliso Viejo CA, US
Stephen Moore - Portland OR, US

International Classification:

H04L 9/00

US Classification:

713156

Abstract:

A method and system is provided for storing a plurality of client certificate credentials via a client web browser into one or more keystore file(s). The client web browser is used to establish the secure data transfer link between the client and the server. The client web browser includes a plug-in software component. The plug-in software component is configured to generate the keystore file and a key pair. The method may continue with generating a certificate request on the client. The certificate request generated is then transmitted to a certificate server. The certificate server is configured to digitally sign the certificate request generated. The method continues with the client receiving a signed certificate request. The signed certificate request is received by the client via the client web browser. The method may conclude by storing the plurality of client certificate credentials associated with the signed certificate request in one or more keystore file(s).

US Patent:

20090307486, Dec 10, 2009

Filed:

Jun 9, 2008

Appl. No.:

12/135466

Inventors:

Garret Grajek - Aliso Viejo CA, US
Stephen Moore - Portland OR, US
Mark Lambiase - Ladera Ranch CA, US

International Classification:

H04L 9/32

US Classification:

713156

Abstract:

A method for self-service authentication of a client and a server. The method includes the server receiving an initialization command from the client. The initialization command may be transmitted to the server via a client web browser over an unsecured data transfer link. The method continues with requesting authentication information from the client. In response to receiving the authentication information from the client, the server transmits a client software component to the client. The client software component utilizes a client-side library installed on the operating system of the client to generate the various client credentials described above. Thereafter, the certificate signing request may be transmitted to a certificate server for signing the certificate signing request. The signed certificate signing request is then received by the client via the client web browser. The client utilizes the information associated with the signed certificate signing request with the client-side library installed on the client to generate a client certificate.

US Patent:

20100138907, Jun 3, 2010

Filed:

Dec 1, 2008

Appl. No.:

12/326002

Inventors:

Garret Grajek - Aliso Viejo CA, US
Stephen Moore - Portland OR, US
Mark Lambiase - Ladera Ranch CA, US

International Classification:

H04L 9/32
G06F 15/16
G06F 17/00

US Classification:

726 10, 709217, 726 15

Abstract:

A certificate server is provided for issuing digital certificates to be used by a network resource and/or a client resource. The certificate server is configured to communicate with the network resource or the client resource to receive a certificate request. Upon receiving the certificate request, the certificate server may automate the process for authenticating the certificate request, validating the terms of the certificate request and digitally signing the certificate request. An authentication appliance may communicate with or be integrated within the certificate server. The certificate server includes a web service server, a certificate authority component, and a database that enable communication with either the network resource, client resource, or the authentication appliance to automate the administration process typically involved in receiving and signing a certificate request. The certificate authority component may sign the certificate request with a trusted root chain associated with the network resource.

US Patent:

20100217975, Aug 26, 2010

Filed:

Feb 25, 2009

Appl. No.:

12/392760

Inventors:

Garret Grajek - Aliso Viejo CA, US
Stephen Moore - Portland OR, US
Mark Lambiase - Ladera Ranch CA, US

International Classification:

H04L 9/32

US Classification:

713157, 713156, 713169

Abstract:

A method and system for authenticating a client and a server is disclosed. In one contemplated embodiment, the client has a client certificate and the server have a server certificate. The client is validated to an authentication module based upon a certificate request identifier generated thereby, a secure data link certificate, and an authentication module Uniform Resource Locator. The authentication module is validated to the client based upon the client certificate and the certificate request identifier. A password associated with a user identifier that is encrypted with a private client key and signed with a public server key is transmitted to the authentication module. The password is then validated.

US Patent:

20130067219, Mar 14, 2013

Filed:

Oct 29, 2012

Appl. No.:

13/663304

Inventors:

Stephen Moore - Portland OR, US
Mark Lambiase - Ladera Ranch CA, US
Craig Lund - Lake Forest CA, US

Assignee:

SECUREAUTH CORPORATION - Irvine CA

International Classification:

G06F 21/00

US Classification:

713156

Abstract:

A valid duration period for a digital certificate is established by a process that includes assigning numeric values to certificate term. The numeric value assigned to each certificate term is representative of the valid duration period. The method continues by identifying one certificate term, which may include requesting a user to select a certificate term. The method may include transmitting the requested certificate term to a server. The certificate term requested is sent via a certificate request. The server is configured to convert the numeric value associated with the requested certificate term into a duration counter value. The method may also include a certificate server receiving from the server, the certificate request including the duration counter value. The method may conclude with transmitting the signed certificate request to a client device capable of generating the digital certificate with the requested certificate term