Patent US5717757A successfully refreshed from Google Patents.
US5717757A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Certificate issue lists
Assignee: NOVOMODO Inc
•
Filing: 1996-11-19
•
Granted: 1998-02-10
•
Expires: 2016-11-19
Abstract
Abstract An authority provides authenticated information about a plurality of certificate identifiers by generating a data string identifying all the plurality of certificate identifiers and by having the authority authenticate one or more of the data string alone, the data string together with date information, or the data string together with additional information. The date information may include the date of authentication. The additional information may include a date of issuance of at least one of the certificates. The additional information may include certificate information about at least some of the issued certificates. The certificate information may include one or more of: revocation information or validity information of at least some of the issued certificates.
Inventors
- 👤 Silvio Micali
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 22:46
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3263; H04L9/3268
Claims Analysis
Total Claims: 62
Claim 1
Independent Claim
43 words
A method for an authority to provide authenticated information about a plurality of issued certificates, comprising the steps of: (a) generating a data string that includes information identifying all the plurality of issued certificates; and (b) having the authority authenticate the data string.
Claim 2
Independent Claim
43 words
A method for an authority to provide authenticated information about a plurality of issued certificates, comprising the steps of: (a) generating a data string that includes information identifying all the plurality of issued certificates; and (b) having the authority authenticate the data string.
Claim 3
Dependent Claim
22 words
A method according to claim 1, wherein the data string further includes information indicating a date of authentication of the data string.
Claim 4
Dependent Claim
25 words
A method according to claim 1, wherein the data string further includes information indicating a date of issuance of at least one of the certificates.
Claim 5
Dependent Claim
21 words
A method according to claim 1, wherein the data string further includes certificate information about a subset of the issued certificates.
Claim 6
Dependent Claim
27 words
A method according to claim 4, wherein the certificate information includes at least one of: revocation information and validity information of the subset of the issued certificates.
Claim 7
Independent Claim
70 words
A method for an authority to generate authenticated information about a plurality of certificates, comprising the steps of: (a) generating a data string indicating a first set of identifiers, where identifiers, in the first set correspond to issued certificates, and a second set of identifiers, wherein identifiers of all issued certificates are outside the second set; and (b) having the authority generate the authenticated information by authenticating the data string.
Claim 8
Independent Claim
70 words
A method for an authority to generate authenticated information about a plurality of certificates, comprising the steps of: (a) generating a data string indicating a first set of identifiers, where identifiers, in the first set correspond to issued certificates, and a second set of identifiers, wherein identifiers of all issued certificates are outside the second set; and (b) having the authority generate the authenticated information by authenticating the data string.
Claim 9
Dependent Claim
22 words
A method according to claim 6, wherein the data string further includes information indicating a date of authentication of the data string.
Claim 10
Dependent Claim
20 words
A method according to claim 6, wherein the data string further includes certificate information about a subset of the certificates.
Claim 11
Dependent Claim
26 words
A method according to claim 8, wherein the certificate information includes at least one of: revocation information and validity information of the subset of the certificates.
Claim 12
Dependent Claim
23 words
A method according to claim 6, wherein the data string further includes a date of issuance of at least one of the certificates.
Claim 13
Independent Claim
43 words
A method for an authority to provide authenticated information about certificate identifiers, comprising, the steps of: (a) generating data indicating a set of identifiers, wherein an identifier of each issued certificate is outside the set; and (b) having the authority authenticate the data.
Claim 14
Independent Claim
43 words
A method for an authority to provide authenticated information about certificate identifiers, comprising, the steps of: (a) generating data indicating a set of identifiers, wherein an identifier of each issued certificate is outside the set; and (b) having the authority authenticate the data.
Claim 15
Dependent Claim
16 words
A method according to claim 11, wherein the data further includes certificate information about issued certificates.
Claim 16
Independent Claim
36 words
A method to provide authenticated information about one or more unissued certificate identifiers, comprising the steps of: (a) generating data that includes information identifying the one or more unissued certificate identifiers; and (b) authenticating the data.
Claim 17
Independent Claim
36 words
A method to provide authenticated information about one or more unissued certificate identifiers, comprising the steps of: (a) generating data that includes information identifying the one or more unissued certificate identifiers; and (b) authenticating the data.
Claim 18
Independent Claim
87 words
A method for an authority to generate authenticated issuance information about a plurality of certificate identifiers, comprising the steps of: (a) mapping at least two of the plurality of certificate identifiers to predetermined bit positions in a data string and having a subset of bits at the bit positions convey issuance information about the at least two certificates, the issuance information indicating whether each of the certificate identifiers corresponds to an issued certificate; and (b) generating authenticated issuance information by having the authority authenticate the data string.
Claim 19
Independent Claim
87 words
A method for an authority to generate authenticated issuance information about a plurality of certificate identifiers, comprising the steps of: (a) mapping at least two of the plurality of certificate identifiers to predetermined bit positions in a data string and having a subset of bits at the bit positions convey issuance information about the at least two certificates, the issuance information indicating whether each of the certificate identifiers corresponds to an issued certificate; and (b) generating authenticated issuance information by having the authority authenticate the data string.
Claim 20
Dependent Claim
24 words
A method according to claim 14, wherein mapping to predetermined bit positions reduces an amount of bits used to represent certificates that are mapped.
Claim 21
Dependent Claim
36 words
A method according to claim 14, wherein an amount of bits used to represent the certificates in the authenticated issuance information is less than a total number of bits contained in serial numbers of the certificates.
Claim 22
Independent Claim
49 words
A method to generate authenticated issuance information about a plurality of certificates, comprising the steps of: (a) generating a data string containing information identifying all issued certificates among the plurality of certificates that share a given characteristic; and (b) generating the authenticated issuance information by authenticating the data string.
Claim 23
Independent Claim
49 words
A method to generate authenticated issuance information about a plurality of certificates, comprising the steps of: (a) generating a data string containing information identifying all issued certificates among the plurality of certificates that share a given characteristic; and (b) generating the authenticated issuance information by authenticating the data string.
Claim 24
Dependent Claim
40 words
A method according to claim 17, wherein each issued certificate has an identifier belonging to an ordered set and the characteristic includes having the identifier be between a given lower bound and a given upper bound in the ordered set.
Claim 25
Dependent Claim
28 words
A method according to claim 17, wherein each issued certificate has an identifier and the characteristic includes having given bits in the identifier be equal to given values.
Claim 26
Dependent Claim
35 words
A method according to claim 17, wherein each issued certificate has an identifier and the characteristic includes having a hash function applied to at least a portion of each issued certificate yield a given value.
Claim 27
Dependent Claim
21 words
A method according to claim 17, wherein the characteristic includes having the certificate contain a given value in a given field.
Claim 28
Independent Claim
45 words
A method to generate authenticated issuance information about a plurality of certificate identifiers, comprising the steps of: (a) generating a data string containing information identifying all unissued certificate identifiers that share a given characteristic; and (b) generating the authenticated information by authenticating the data string.
Claim 29
Independent Claim
45 words
A method to generate authenticated issuance information about a plurality of certificate identifiers, comprising the steps of: (a) generating a data string containing information identifying all unissued certificate identifiers that share a given characteristic; and (b) generating the authenticated information by authenticating the data string.
Claim 30
Dependent Claim
38 words
A method according to claim 22, wherein each unissued certificate identifier belongs to an ordered set and the characteristic includes having the identifier be between a given lower bound and a given upper bound in the ordered set.
Claim 31
Dependent Claim
21 words
A method according to claim 22, wherein the characteristic includes having given bits in the identifier be equal to given values.
Claim 32
Dependent Claim
29 words
A method according to claim 22, wherein the characteristic includes having a hash function applied to at least a portion of the unissued certificate identifier yield a given value.
Claim 33
Dependent Claim
21 words
A method according to claim 22, wherein the characteristic includes having the certificate contain a given value in a given field.
Claim 34
Independent Claim
69 words
A method for an authority to generate authenticated information about a plurality of certificate identifiers, comprising the steps of: (a) generating a data string containing information identifying a set containing all of the certificate identifiers that share a given characteristic and correspond to issued certificates, at least one of the issued certificates not being revoked; and (b) generating the authenticated information by having the authority authenticate the data string.
Claim 35
Independent Claim
69 words
A method for an authority to generate authenticated information about a plurality of certificate identifiers, comprising the steps of: (a) generating a data string containing information identifying a set containing all of the certificate identifiers that share a given characteristic and correspond to issued certificates, at least one of the issued certificates not being revoked; and (b) generating the authenticated information by having the authority authenticate the data string.
Claim 36
Independent Claim
86 words
A method for an authority to provide authenticated issuance information about issued certificates, comprising the steps of: (a) choosing a plurality of characteristics; (b) for each of the characteristics, generating a data string that contains information that identifies the characteristic and all the issued certificates possessing the characteristic, wherein at least one of the certificates is not revoked and wherein each of the certificates possess at least one of the characteristics; and (c) generating the authenticated information having the authority authenticate each of the data strings.
Claim 37
Independent Claim
86 words
A method for an authority to provide authenticated issuance information about issued certificates, comprising the steps of: (a) choosing a plurality of characteristics; (b) for each of the characteristics, generating a data string that contains information that identifies the characteristic and all the issued certificates possessing the characteristic, wherein at least one of the certificates is not revoked and wherein each of the certificates possess at least one of the characteristics; and (c) generating the authenticated information having the authority authenticate each of the data strings.
Claim 38
Dependent Claim
24 words
A method according to claim 28, wherein at least one of the data strings further includes revocation information for a subset of the certificates.
Claim 39
Dependent Claim
18 words
A method according to claim 29, wherein the characteristic includes an identifier for a subset of the certificates.
Claim 40
Independent Claim
78 words
A method for an authority to provide authenticated issuance information about certificate identifiers, comprising the steps of: (a) choosing a plurality of characteristics wherein each of the certificate identifiers possesses at least one of the characteristics; (b) for each of the characteristics, generating a data string containing information that indicates the characteristic and a set of unissued certificate identifiers possessing the characteristic; and (c) generating the authenticated information by having the authority authenticate each of the data strings.
Claim 41
Independent Claim
78 words
A method for an authority to provide authenticated issuance information about certificate identifiers, comprising the steps of: (a) choosing a plurality of characteristics wherein each of the certificate identifiers possesses at least one of the characteristics; (b) for each of the characteristics, generating a data string containing information that indicates the characteristic and a set of unissued certificate identifiers possessing the characteristic; and (c) generating the authenticated information by having the authority authenticate each of the data strings.
Claim 42
Dependent Claim
23 words
A method according to claim 31, wherein at least one of the data strings includes certificate information for a subset of issued certificates.
Claim 43
Dependent Claim
24 words
A method according to claim 31, wherein at least one of the characteristics corresponds to an identifier for at least one of the certificates.
Claim 44
Independent Claim
83 words
A method to provide authenticated issuance information about certificate identifiers, comprising the steps of: (a) choosing a plurality of characteristics wherein each of the certificate identifiers possesses at least one of the characteristics; (b) for each of the characteristics, generating a data string that identifies the characteristic, all the identifiers for issued and unissued certificates possessing the characteristic, and information distinguishing the issued certificate identifiers from the unissued certificate identifiers; and (c) generating the authenticated information by authenticating each of the data strings.
Claim 45
Independent Claim
83 words
A method to provide authenticated issuance information about certificate identifiers, comprising the steps of: (a) choosing a plurality of characteristics wherein each of the certificate identifiers possesses at least one of the characteristics; (b) for each of the characteristics, generating a data string that identifies the characteristic, all the identifiers for issued and unissued certificates possessing the characteristic, and information distinguishing the issued certificate identifiers from the unissued certificate identifiers; and (c) generating the authenticated information by authenticating each of the data strings.
Claim 46
Dependent Claim
25 words
A method according to claim 34, wherein the at least one of the data strings further includes revocation information for a subset of the certificates.
Claim 47
Dependent Claim
18 words
A method according to claim 34, wherein the characteristic corresponds to identifiers for a subset of the certificates.
Claim 48
Independent Claim
49 words
A method for providing authenticated information about certificates, comprising the steps of: (a) receiving a request for information about a certificate including a proof that the certificate is issued; (b) verifying that the proof is valid; and (c) in response to the proof being valid, providing the requested information.
Claim 49
Independent Claim
49 words
A method for providing authenticated information about certificates, comprising the steps of: (a) receiving a request for information about a certificate including a proof that the certificate is issued; (b) verifying that the proof is valid; and (c) in response to the proof being valid, providing the requested information.
Claim 50
Dependent Claim
15 words
A method according to claim 37, wherein the proof includes providing an entire CA-authenticated certificate.
Claim 51
Dependent Claim
24 words
A method according to claim 38, wherein verifying includes comparing the entire CA-authenticated certificate to an on hand copy of a verified CA-authenticated certificate.
Claim 52
Dependent Claim
32 words
A method according to claim 38, wherein verifying includes comparing a function evaluated at the entire CA-authenticated certificate to the function evaluated at an on hand copy of a verified CA-authenticated certificate.
Claim 53
Dependent Claim
26 words
A method according to claim 38, wherein a CA digitally signs the certificate to authenticate the certificate and verifying includes verifying the signature of the CA.
Claim 54
Dependent Claim
17 words
A method according to claim 37, wherein the proof includes a hash of an entire CA-authenticated certificate.
Claim 55
Dependent Claim
28 words
A method according to claim 42, wherein verifying includes comparing the hash of the CA-signed certificate to an on hand copy of a hash verified entire CA-signed certificate.
Claim 56
Dependent Claim
18 words
A method according to claim 37, wherein the proof includes a given function of an entire CA-authenticated certificate.
Claim 57
Independent Claim
72 words
A method for providing authenticated information about certificates to a requestor, comprising the steps of: (a) receiving a request for a first type of information about at least one certificate including a proof that the requestor knows at least a second type of information about the certificate; (b) verifying that the proof is valid; and (c) in response to the proof being valid, providing the first type of information to the requestor.
Claim 58
Independent Claim
72 words
A method for providing authenticated information about certificates to a requestor, comprising the steps of: (a) receiving a request for a first type of information about at least one certificate including a proof that the requestor knows at least a second type of information about the certificate; (b) verifying that the proof is valid; and (c) in response to the proof being valid, providing the first type of information to the requestor.
Claim 59
Dependent Claim
11 words
A method according to claim 45, wherein the proof is interactive.
Claim 60
Dependent Claim
14 words
A method according to claim 45, wherein the second type of information is authenticated.
Claim 61
Independent Claim
52 words
A method of providing to a user authenticated information about an identifier for a certificate, comprising the steps of: (a) having the user provide the identifier to an intermediary; and (b) having the intermediary cause the user to receive authenticated information indicating that the identifier does not correspond to an issued certificate.
Claim 62
Independent Claim
52 words
A method of providing to a user authenticated information about an identifier for a certificate, comprising the steps of: (a) having the user provide the identifier to an intermediary; and (b) having the intermediary cause the user to receive authenticated information indicating that the identifier does not correspond to an issued certificate.
References Cited (Backward Citations)
US4200770A
Cited
US4218582A
Cited
US4309569A
Cited
US4326098A
Cited
US4926480A
Cited
US4881264A
Cited
US4868877A
Cited
US5016274A
Cited
US5003597A
Cited
US5157726A
Cited
US5261002A
Cited
US5231666A
Cited
US5432852A
Cited
US5420927A
Cited
US5420927B1
Cited
US5544322A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-02-09 | 2001-08-11 | 2002-02-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-02-09 | 2005-08-11 | 2006-02-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-02-09 | 2009-08-11 | 2010-02-10 | $7700.00 | Window Closed / Lapsed |