One-time password certificate renewal

摘要

Embodiments are directed to providing a certificate extension to an authentication certificate, to validating an authentication certificate request and to implementing authentication certificates that include certificate extensions. In an embodiment, a computer system accesses an authentication certificate request that is to be sent to a validation server for validation and to a certificate authority for issuance of an authentication certificate. The computer system appends an extension to the authentication certificate request. The extension includes origination information about the authentication certificate. The computer system then sends the authentication certificate request with the appended extension to the validation server for validation.

主权项

1. At a client computer system including at least one processor and a memory, in a computer networking environment including a plurality of computing systems, a computer-implemented method for providing a certificate extension to an authentication certificate, the method comprising:
accessing an authentication certificate renewal request that is to be sent first to a validation server for validation and, when validated by the validation server, to a certificate authority for issuance of an authentication certificate; appending an extension to the authentication certificate renewal request, the extension including origination information about the authentication certificate, identification of a user and computer system which issued the request, and indication of when a last request from the user was received, and wherein the extension is sent with the authentication certificate renewal request to the validation server for validation; sending the authentication certificate renewal request with the appended extension to the validation server for validation, wherein when validated by the validation server, the validation server sends the validated request and the extension to the certificate authority for issuance of an authentication certificate; and receiving a validation result from the validation server.