METHOD AND APPARATUS FOR AUTOMATING SELECTION OF CERTIFICATE MANAGEMENT POLICIES DURING ISSUANCE OF A CERTIFICATE

摘要

A Public Key Infrastructure (PM) device receives a certificate signing request (CSR) from an end entity. The PKI device obtains at least one of: a controlling attribute of at least one PKI device associated with processing of the certificate signing request and a controlling attribute associated with the CSR. The PKI device obtains an end entity policy object (EEPO) to be associated with the end entity based on at least one obtained controlling attribute. Based on the obtained EEPO, the PKI device determines at least one attribute and at least one value associated with the attribute this is to be included in a certificate and issues, to the end entity, the certificate including the at least one attribute.

主权项

1. A method comprising;
receiving, by a Public Key Infrastructure (PKI) device, a certificate signing request from an end entity; obtaining, by the PKI device, at least one of:
a controlling attribute of at least one PKI device associated with processing of the certificate signing request; anda controlling attribute associated with the certificate signing request; obtaining, by the PKI device, an end entity policy object (EEPO) to be associated with the end entity based on at least one obtained controlling attribute; determining, by the PKI device and based on an obtained EEPO, at least one attribute and at least one value associated with the at least one attribute that is to be included in a certificate; and issuing, by the PKI device to the end entity, the certificate including the at least one attribute.