Revocation list improvement

Details Revocation list improvement Revocation list improvement

2006-10-03

2011-10-18

Smithers, Matthew (Department: 2437)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Central trusted authority provides computer authentication

C380S286000

Reexamination Certificate

active

08041943

ABSTRACT:
A method for enforcing use of certificate revocation lists in validating certificates, the lists being associated with a series of list generation indices such that each list is assigned one index which advances according to a time of generation of the list, the lists and the indices being cryptographically signed, the method including receiving one of the lists and an associated index as an identifier of the one list, checking the certificates against the list, associating each of the certificates, which have been checked against the list, with the index, receiving an enforcement generation index (EGI) associated with a latest list in use, storing the EGI as a last known EGI, and refusing performance of an action associated with a certificate if the one index of the one certificate is earlier in the series than the last known EGI. Related apparatus and methods are also included.

REFERENCES:
patent: 5461675 (1995-10-01), Diehl et al.
patent: 5949877 (1999-09-01), Traw et al.
patent: 6314517 (2001-11-01), Moses et al.
patent: 7117360 (2006-10-01), Zhao
patent: 7382762 (2008-06-01), Chmora et al.
patent: 2003/0014629 (2003-01-01), Zuccherato
patent: 2003/0061481 (2003-03-01), Levine et al.
patent: 2004/0168056 (2004-08-01), Dillaway et al.
patent: 2005/0154875 (2005-07-01), Chao
patent: 2005/0154898 (2005-07-01), Chao
patent: 2005/0154918 (2005-07-01), Engberg
patent: 2005/0198508 (2005-09-01), Beck
patent: 2005/0204127 (2005-09-01), Dive-Reclus et al.
patent: 2005/0257045 (2005-11-01), Bushman et al.
patent: 2005/0257046 (2005-11-01), Durand
patent: 2008/0163338 (2008-07-01), Micali
patent: 1 594 251 (2005-11-01), None
patent: 1 732 261 (2006-12-01), None
patent: WO 01/61591 (2001-08-01), None
patent: WO 03/056823 (2003-07-01), None
patent: WO 2005/093992 (2005-10-01), None
patent: WO 2006/043262 (2006-04-01), None
Jan. 18, 2011 Office Communication in connection with prosecution of EP 06 796 144.1.
Mar. 22, 2010 Office Communication in connection with prosecution of EP 06 79 6144.1.
Series X: Data Networks and Open System Communications Directory; Information technology-Open Systems Interconnection—The Directory; Authentication Framework, pp. 22-43 (ITU-T Recommendation X.509; International Telecommunication Union, Aug. 1997).
James M. Hayes, “Restricting Access with Certificate Attributes in Multiple Root Envioronments—A Recipe for Certificate Masquerading” (Systems and Network Attack Center, National Security Agency).
Aug. 25, 2010 Office Communication in connection with prosecution of AU 2006 341099.
Apr. 21, 2011 Office Communication in connection with prosecution of AU 2006 341099.

Affiliated with

Also associated with

Rating

Revocation list improvement does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Revocation list improvement, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Revocation list improvement will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4276967