Patents by Inventor LUCAS J. KOOPS

LUCAS J. KOOPS has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Identity management for software components
    Patent number: 12034869
    Abstract: One or more computing devices employs a method that includes requesting a transient credential (e.g., a one-time PKI certificate) as a first identity credential for an application component instance based on a unique identifier associated with the application component instance. The method includes requesting a dynamically-created second identity credential for the application component instance of the application using a request signed (e.g., using the public key of the first identity PKI certificate) based on the transient credential. The method includes receiving the dynamically-created second identity credential and using the dynamically-created second identity credential in a cryptographic function by the application component instance; and managing the replacement of this credential in environments without persistent archival storage accessible by the device/application.
    Type: Grant
    Filed: June 3, 2022
    Date of Patent: July 9, 2024
    Assignee: ENTRUST CORPORATION
    Inventors: Thomas P. Chmara, Lucas J. Koops, Jon Ferguson
  • Identity management for software components using one-time use credential and dynamically created identity credential
    Patent number: 11496322
    Abstract: One or more computing devices employs a method that includes requesting a transient credential (e.g., a one-time PKI certificate) as a first identity credential for an application component instance based on a unique identifier associated with the application component instance. The method includes requesting a dynamically-created second identity credential for the application component instance of the application using a request signed (e.g., using the public key of the first identity PKI certificate) based on the transient credential. The method includes receiving the dynamically-created second identity credential and using the dynamically-created second identity credential in a cryptographic function by the application component instance; and managing the replacement of this credential in environments without persistent archival storage accessible by the device/application.
    Type: Grant
    Filed: October 11, 2018
    Date of Patent: November 8, 2022
    Assignee: ENTRUST, INC.
    Inventors: Thomas P. Chmara, Lucas J. Koops, Jon Ferguson
  • IDENTITY MANAGEMENT FOR SOFTWARE COMPONENTS
    Publication number: 20220294646
    Abstract: One or more computing devices employs a method that includes requesting a transient credential (e.g., a one-time PKI certificate) as a first identity credential for an application component instance based on a unique identifier associated with the application component instance. The method includes requesting a dynamically-created second identity credential for the application component instance of the application using a request signed (e.g., using the public key of the first identity PKI certificate) based on the transient credential. The method includes receiving the dynamically-created second identity credential and using the dynamically-created second identity credential in a cryptographic function by the application component instance; and managing the replacement of this credential in environments without persistent archival storage accessible by the device/application.
    Type: Application
    Filed: June 3, 2022
    Publication date: September 15, 2022
    Inventors: THOMAS P. CHMARA, LUCAS J. KOOPS, JON FERGUSON
  • IDENTITY MANAGEMENT FOR SOFTWARE COMPONENTS
    Publication number: 20190356494
    Abstract: One or more computing devices employs a method that includes requesting a transient credential (e.g., a one-time PKI certificate) as a first identity credential for an application component instance based on a unique identifier associated with the application component instance. The method includes requesting a dynamically-created second identity credential for the application component instance of the application using a request signed (e.g., using the public key of the first identity PKI certificate) based on the transient credential. The method includes receiving the dynamically-created second identity credential and using the dynamically-created second identity credential in a cryptographic function by the application component instance; and managing the replacement of this credential in environments without persistent archival storage accessible by the device/application.
    Type: Application
    Filed: October 11, 2018
    Publication date: November 21, 2019
    Inventors: THOMAS P. CHMARA, LUCAS J. KOOPS, JON FERGUSON