US 11,888,994 B1
Automated determination of template public key infrastructure systems
Param Sharma, Haymarket, VA (US); Josh Rosenthol, Centreville, VA (US); Todd Cignetti, Ashburn, VA (US); and Jonathan Kozolchyk, Seattle, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Jun. 30, 2021, as Appl. No. 17/364,232.
Int. Cl. H04L 9/32 (2006.01); H04L 9/08 (2006.01)
CPC H04L 9/3263 (2013.01) [H04L 9/0825 (2013.01); H04L 9/0836 (2013.01); H04L 9/0891 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method to determine a public key infrastructure (PKI) hierarchy, comprising:
obtaining, from a client device, a plurality of infrastructure information associated with a network system for which the PKI hierarchy is to be deployed;
processing, by a PKI creation service, a plurality of stored PKI information and the plurality of infrastructure information;
determining, based at least in part on the processing of the plurality of stored PKI information and the plurality of infrastructure information, a PKI template defining a first configuration of a first PKI hierarchy, wherein the first configuration specifies at least a first certificate authority (CA) hierarchy;
generating, by the PKI creation service, a first configurable representation of the first configuration of the first PKI hierarchy defined by the PKI template;
sending, for presentation on the client device, the first configurable representation of the first configuration of the first PKI hierarchy;
obtaining, from the client device, an interaction with the first configurable representation of the first PKI hierarchy indicating a modification to the first configuration of the first PKI hierarchy;
generating, by the PKI creation service in response to the interaction, an updated PKI template including the modification to the first configuration of the first PKI hierarchy, the updated PKI template defining a second configuration of a second PKI hierarchy, wherein the second configuration specifies at least a second CA hierarchy;
generating, by the PKI creation service, a second configurable representation of the second configuration of the second PKI hierarchy;
sending, for presentation on the client device, the second configurable representation of the second configuration of the second PKI hierarchy;
obtaining, from the client device, an indication of an acceptance of the second configuration of the second PKI hierarchy; and
providing, by the PKI creation service, the second PKI hierarchy as the PKI hierarchy.