Partitioning certificate revocation lists

    公开(公告)号:US09882727B1

    公开(公告)日:2018-01-30

    申请号:US14874310

    申请日:2015-10-02

    申请人: DigiCert, Inc.

    IPC分类号: H04L29/06 H04L9/32

    摘要: Certificates issued by a CA are distributed across multiple CRLs. Each certificate issued by the CA is assigned to a specific CRL, and the address of that CRL is written to the appropriate field of the certificate, such that an authenticating application can subsequently determine if the certificate is revoked. When the CA revokes a specific one of the issued certificates, it determines to which CRL the revoked certificate is assigned, and updates the specific CRL accordingly. In some embodiments, a single one of the multiple CRLs is active for assignment of certificates at any given time, and each certificate issued by the CA is assigned to the currently active CRL. In other embodiments, assignments of issued certificates are distributed between different ones of a pre-determined number of multiple CRLs by applying a statistical distribution formula to each issued certificate to determine a corresponding target CRL.

    Securely upgrading or downgrading platform components
    5.
    发明授权
    Securely upgrading or downgrading platform components 失效
    安全升级或降级平台组件

    公开(公告)号:US08667270B2

    公开(公告)日:2014-03-04

    申请号:US13371195

    申请日:2012-02-10

    摘要: A method for securely altering a platform component is provided, comprising: assigning certificates for public encryption and signature verification keys for the device; assigning certificates for public encryption and signature verification keys for an upgrade server; mutually authenticating a device containing the platform component and the upgrade server; causing the device and the upgrade server to exchange a session key; and providing an alteration to be made to the platform component from the upgrade server to the device using the session key.

    摘要翻译: 提供一种用于安全地改变平台组件的方法,包括:为所述设备分配用于公共加密的证书和签名验证密钥; 为升级服务器分配公共加密证书和签名验证密钥; 相互验证包含平台组件和升级服务器的设备; 使设备和升级服务器交换会话密钥; 并且使用会话密钥向平台组件提供从升级服务器到设备的改变。

    Authentication of computing devices using augmented credentials to enable actions-per-group
    6.
    发明授权
    Authentication of computing devices using augmented credentials to enable actions-per-group 有权
    使用增强凭证来验证计算设备以启用每组动作

    公开(公告)号:US09253175B1

    公开(公告)日:2016-02-02

    申请号:US13874201

    申请日:2013-04-30

    发明人: Michael Orr

    IPC分类号: H04L29/06

    摘要: In one or more embodiments, attributes other than a supplicant's MAC address can be used for the user name in the authentication process in a network computing environment. In at least some embodiments, doing so utilizes an association structure, such as a table, that is already resident at the authentication server. By using attributes other than a supplicant's MAC address, various matching scenarios can be provided by the authentication server in which authentication or authorization takes place responsive to satisfying conditions defined in the authentication server's association or database. Furthermore, a variety of non-authentication scenarios can be supported using the authentication server's association.

    摘要翻译: 在一个或多个实施例中,除了请求者的MAC地址之外的属性可以用于网络计算环境中的认证过程中的用户名。 在至少一些实施例中,这样做利用已经驻留在认证服务器的关联结构,诸如表。 通过使用除了请求方的MAC地址以外的属性,可以根据认证服务器的关联或数据库中定义的满足条件,由验证服务器提供各种匹配场景,在认证服务器中进行认证或授权。 此外,可以使用认证服务器的关联来支持各种非验证场景。

    SECURELY UPGRADING OR DOWNGRADING PLATFORM COMPONENTS
    10.
    发明申请
    SECURELY UPGRADING OR DOWNGRADING PLATFORM COMPONENTS 失效
    安全升级或升级平台组件

    公开(公告)号:US20130212380A1

    公开(公告)日:2013-08-15

    申请号:US13371195

    申请日:2012-02-10

    IPC分类号: H04L9/32

    摘要: A method for securely altering a platform component is provided, comprising: assigning certificates for public encryption and signature verification keys for the device; assigning certificates for public encryption and signature verification keys for an upgrade server; mutually authenticating a device containing the platform component and the upgrade server; causing the device and the upgrade server to exchange a session key; and providing an alteration to be made to the platform component from the upgrade server to the device using the session key.

    摘要翻译: 提供一种用于安全地改变平台组件的方法,包括:为所述设备分配用于公共加密的证书和签名验证密钥; 为升级服务器分配公共加密证书和签名验证密钥; 相互验证包含平台组件和升级服务器的设备; 使设备和升级服务器交换会话密钥; 并且使用会话密钥向平台组件提供从升级服务器到设备的改变。