US5717758A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Witness-based certificate revocation system
Assignee: NOVOMODO Inc
•
Filing: 1996-12-09
•
Granted: 1998-02-10
•
Expires: 2016-12-09
Abstract
Abstract An intermediary provides certificate information by receiving from a first other entity authenticated certificate information, processing at least a portion of the authenticated certificate information to obtain deduced information, if the deduced information is consistent with the authenticated certificate information, having a witness construct authenticated deduced information by authenticating at least one of: the deduced information, the deduced information together with date information, and the deduced information together with additional information, and by providing the authenticated deduced information. The date information may be at least one of: the current date and date information of the authenticated certificate information. The witness may do the processing. The witness may be the intermediary. The authenticated certificate information and/or the authenticated deduced information may include a digital signature, which may be relative to a verification key that is part of an issued certificate and/or may be computed by applying a one-way function to one or more secret values or by iterating a one-way function. The digital signature may keep the witness accountable for the fact that the authenticated deduced information is consistent with the authenticated certificate information.
Inventors
- 👤 Silvio Micall
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 10:27
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; H; H04; H04L; H04L9/00; H04L9/006; H04L9/007; H04L9/32; H04L9/3247; H04L9/3263; H04L9/3268
Claims Analysis
Total Claims: 88
Claim 1
Independent Claim
96 words
A method for an intermediary to provide certificate information, comprising the steps of: (a) receiving from a first other entity authenticated certificate information; (b) processing at least a portion of the authenticated certificate information to obtain deduced information that is not part of the authenticated information; (c) if the deduced information is consistent with the authenticated certificate information, having a witness construct authenticated deduced information by authenticating at least one of: the deduced information, the deduced information together with date information, and the deduced information together with additional information; and (d) providing the authenticated deduced information.
Claim 2
Independent Claim
96 words
A method for an intermediary to provide certificate information, comprising the steps of: (a) receiving from a first other entity authenticated certificate information; (b) processing at least a portion of the authenticated certificate information to obtain deduced information that is not part of the authenticated information; (c) if the deduced information is consistent with the authenticated certificate information, having a witness construct authenticated deduced information by authenticating at least one of: the deduced information, the deduced information together with date information, and the deduced information together with additional information; and (d) providing the authenticated deduced information.
Claim 3
Dependent Claim
25 words
A method according to claim 1, wherein the date information is at least one of:the current date and date information of the authenticated certificate information.
Claim 4
Dependent Claim
12 words
A method according to claim 1, wherein the witness does the processing.
Claim 5
Dependent Claim
12 words
A method according to claim 1, wherein the witness is the intermediary.
Claim 6
Dependent Claim
15 words
A method according to claim 4, wherein the authenticated deduced information includes a digital signature.
Claim 7
Dependent Claim
23 words
A method according to claim 5, wherein the digital signature is relative to a verification key that is part of an issued certificate.
Claim 8
Dependent Claim
23 words
A method according to claim 6, wherein the digital signature is computed by applying a one-way function to one or more secret values.
Claim 9
Dependent Claim
17 words
A method according to claim 6, wherein the digital signature is computed by iterating a one-way function.
Claim 10
Dependent Claim
29 words
A method according to claim 5, wherein the digital signature keeps the witness accountable for the fact that the authenticated deduced information is consistent with the authenticated certificate information.
Claim 11
Dependent Claim
36 words
A method according to claim 9, wherein at least one of:the intermediary and the witness cause the authenticated information to be saved in order to prove that the deduced information is consistent with authenticated certificate information.
Claim 12
Dependent Claim
15 words
A method according to claim 1, wherein the authenticated certificate information includes a digital signature.
Claim 13
Dependent Claim
21 words
A method according to claim 1, wherein the witness determines if the deduced information is consistent with the authenticated certificate information.
Claim 14
Dependent Claim
58 words
A method according to claim 1, wherein processing includes the steps of: (a) extracting identifiers of revoked certificates from the authenticated certificate information; and (b) providing the deduced information by dividing the identifiers of the revoked certificates into a plurality of lists, wherein each of the lists includes all identifiers between a first value and a second value.
Claim 15
Dependent Claim
12 words
A method according to claim 13, wherein the identifiers include serial numbers.
Claim 16
Dependent Claim
12 words
A method according to claim 13, wherein the identifiers include user names.
Claim 17
Dependent Claim
38 words
A method according to claim 1, wherein processing includes the steps of: (a) extracting an identifier of a revoked certificates from the authenticated certificate information; and (b) providing an indication that the identifier corresponds to a revoked certificate.
Claim 18
Dependent Claim
37 words
A method according to claim 1, wherein processing includes the steps of: (a) deducing from the authenticated certificate information that a certificate is valid; and (b) providing an indication that the certificate corresponds to a valid certificate.
Claim 19
Dependent Claim
37 words
A method according to claim 1, wherein the authenticated certificate information relates to a plurality of certificates and wherein processing includes obtaining the deduced information by determining that a proper subset of the certificates has been revoked.
Claim 20
Dependent Claim
36 words
A method according to claim 1, wherein the authenticated certificate information relates to a plurality of certificates and wherein processing includes obtaining the deduced information by determining that a proper subset of the certificates are valid.
Claim 21
Dependent Claim
48 words
A method according to claim 1, wherein the authenticated certificate information relates to a plurality of certificates and wherein processing includes obtaining the deduced information by determining which of a proper subset of the certificates are valid and which of a proper subset of the certificates are revoked.
Claim 22
Dependent Claim
24 words
A method according to claim 1, wherein processing includes obtaining the deduced information by identifying all of the revoked certificates sharing a given characteristic.
Claim 23
Dependent Claim
16 words
A method according to claim 21, wherein the additional information includes an indication of the characteristic.
Claim 24
Dependent Claim
18 words
A method according to claim 21, wherein the characteristic includes having a certificate identifier between two given values.
Claim 25
Dependent Claim
25 words
A method according to claim 21, wherein the characteristic includes a distribution point that is assigned by an issuing authority when a certificate is created.
Claim 26
Dependent Claim
50 words
A method according to claim 1, wherein the authenticated certificate information indicates a verification key of a certificate, the deduced information indicates that the certificate is valid, and providing the authenticated deduced information includes producing a digital signature relative to the verification key to prove that the certificate is valid.
Claim 27
Dependent Claim
24 words
A method according to claim 1, wherein the authenticated certificate information includes at least one of:indication of issued certificates and indication of revoked certificates.
Claim 28
Dependent Claim
15 words
A method according to claim 26, wherein the indication of revoked certificates includes a CRL.
Claim 29
Dependent Claim
43 words
A method according to claim 1, wherein the authenticated certificate information includes at least one of:information indicating issued certificates and information indicating certificates that should no longer be issued, and wherein the authenticated deduced information indicates that at least one certificate is valid.
Claim 30
Dependent Claim
23 words
A method according to claim 28, wherein the authenticated deduced information includes at least one reissued certificate indicating that the certificate is valid.
Claim 31
Dependent Claim
28 words
A method according to claim 28, wherein the authenticated deduced information includes at least one reissued certificate indicating that a validity period of the certificate has been modified.
Claim 32
Dependent Claim
45 words
A method according to claim 1, wherein the authenticated certificate information includes at least one of:information indicating issued certificates and information indicating certificates that should be reissued, and wherein the authenticated deduced information includes at least one reissued certificate indicating that the certificate is valid.
Claim 33
Dependent Claim
50 words
A method according to claim 1, wherein the authenticated certificate information includes at least one of:information indicating issued certificates and information indicating certificates that should be reissued, and wherein the authenticated deduced information includes at least one reissued certificate indicating that a validity period of the certificate has been modified.
Claim 34
Dependent Claim
38 words
A method according to claim 1, wherein the authenticated certificate information includes at least one of:information indicating issued certificates and information indicating currently valid certificates and wherein the deduced information indicates that at least one certificate is revoked.
Claim 35
Dependent Claim
37 words
A method according to claim 1, wherein the authenticated certificate information includes at least one of:information indicating revoked certificates and information indicating valid certificates and wherein the deduced information indicates that at least one certificate is issued.
Claim 36
Dependent Claim
12 words
A method according to claim 1, wherein the witness uses tamper-proof hardware.
Claim 37
Dependent Claim
20 words
A method according to claim 35, wherein the tamper-proof hardware has a secret key used to authenticate the deduced information.
Claim 38
Dependent Claim
17 words
A method according to claim 35, wherein the tamper-proof hardware is implemented using a single integrated circuit.
Claim 39
Dependent Claim
12 words
A method according to claim 35, wherein the witness is the intermediary.
Claim 40
Dependent Claim
13 words
A method according to claim 38, wherein the witness performs the processing step.
Claim 41
Dependent Claim
13 words
A method according to claim 35, wherein the witness performs the processing step.
Claim 42
Dependent Claim
20 words
method according to claim 35, wherein the authenticated deduced information is provided in response to a query of a user.
Claim 43
Dependent Claim
19 words
A method according to claim 41, wherein at least a portion of the query is hidden from the intermediary.
Claim 44
Dependent Claim
23 words
A method according to claim 42, wherein at least a potion of the query is encrypted with a key of the tamper-proof hardware.
Claim 45
Dependent Claim
26 words
A method according to claim 42, wherein at least a portion of the query remains hidden from the intermediary when the authenticated deduced information is provided.
Claim 46
Dependent Claim
23 words
A method according to claim 41, wherein at least a portion of the query is encrypted with a key of the tamper-proof hardware.
Claim 47
Dependent Claim
36 words
A method according to claim 45, wherein the query relates to one or more certificates, and at least one serial number of the one or more certificates is encrypted with the key of the tamper-proof hardware.
Claim 48
Dependent Claim
18 words
A method according to claim 45, wherein the query includes an indication of a key of the user.
Claim 49
Dependent Claim
21 words
A method according to claim 47, wherein the key of the user is encrypted with the key of the tamper-proof hardware.
Claim 50
Dependent Claim
24 words
A method according to claim 48, wherein at least a portion of the authenticated deduced information is encrypted with the key of the user.
Claim 51
Dependent Claim
26 words
A method according to claim 49, wherein at least a portion of the query remains hidden from the intermediary when the authenticated deduced information is provided.
Claim 52
Dependent Claim
24 words
A method according to claim 47, wherein at least a portion of the authenticated deduced information is encrypted with the key of the user.
Claim 53
Dependent Claim
26 words
A method according to claim 51, wherein at least a portion of the query remains hidden from the intermediary when the authenticated deduced information is provided.
Claim 54
Dependent Claim
23 words
A method according to claim 1, wherein a second other entity determines if the deduced information is consistent with the authenticated certificate information.
Claim 55
Dependent Claim
27 words
method according to claim 53, wherein the second other entity provides the witness with an indication that the deduced information is consistent with the authenticated certificate information.
Claim 56
Dependent Claim
18 words
A method according to claim 1, wherein the authenticated deduced information is provided in response to a query.
Claim 57
Dependent Claim
20 words
A method according to claim 55, wherein the query includes of a program that operates on the authenticated certificate information.
Claim 58
Dependent Claim
11 words
A method according to claim 55, wherein the query is encrypted.
Claim 59
Dependent Claim
16 words
A method according to claim 55, wherein the additional information includes an indication of the query.
Claim 60
Dependent Claim
19 words
A method according to claim 58, wherein the indication of the query includes a one-way hash of the query.
Claim 61
Dependent Claim
42 words
A method according to claim 1, wherein the deduced information contains less bits that a smallest piece of certificate information that is unable for obtaining the deduced information wherein the certificate information is information that is authenticated in the authenticated certificate information.
Claim 62
Dependent Claim
40 words
A method according to claim 1, wherein the deduced information is different from any piece of certificate information that is usable for obtaining the deduced information wherein the certificate information is information that is authenticated in the authenticated certificate information.
Claim 63
Dependent Claim
13 words
A method according to claim 1, wherein the intermediary does not revoke certificates.
Claim 64
Dependent Claim
13 words
A method according to claim 1, wherein the intermediary does not issue certificates.
Claim 65
Dependent Claim
15 words
A method according to claim 1, wherein the first other entity is a certification authority.
Claim 66
Dependent Claim
32 words
A method according to claim 1, wherein the deduced information is authenticated by being posted in a read-only file that is writable only by at least one of:the witness and the intermediary.
Claim 67
Dependent Claim
25 words
A method according to claim 1, wherein the authenticated certificate information includes a hierarchical certificate and wherein the authenticated deduced information includes a reissued certificate.
Claim 68
Dependent Claim
38 words
A method according to claim 66, wherein the reissued certificate includes at least one of:a digital signature of the witness and a digital signature of the witness together with a certificate for a public key of the witness.
Claim 69
Dependent Claim
16 words
A method according to claim 66, wherein the reissued certificate expires when the hierarchical certificate expires.
Claim 70
Dependent Claim
17 words
A method according to claim 66, wherein the reissued certificate contain less bits than the hierarchical certificate.
Claim 71
Dependent Claim
19 words
A method according to claim 66, wherein the reissued certificate contains less hierarchical certificate information than the hierarchical certificate.
Claim 72
Dependent Claim
23 words
A method according to claim 70, wherein the reissued certificate does not contain at least one digital signature contained in the hierarchical certificate.
Claim 73
Dependent Claim
23 words
A method according to claim 66, wherein the reissued certificate is verifiable by verifying the signatures of less authorities than the hierarchical certificate.
Claim 74
Dependent Claim
30 words
A method according to claim 66, wherein the reissued certificate is verifiable relative to a universally known public key by verifying the signatures of less authorities than the hierarchical certificate.
Claim 75
Dependent Claim
24 words
A method according to claim 73, wherein the reissued certificate and the hierarchical certificate are verifiable relative to the same universally know public key.
Claim 76
Independent Claim
98 words
A method for an intermediary to provide certificate information, comprising the steps of: (a) receiving from a first other entity authenticated certificate information; (b) processing at least a portion of the authenticated certificate information to provide deduced information that is not part of the authenticated information; (c) if the deduced information is consistent with the authenticated certificate information, having a plurality of witnesses construct authenticated deduced information by authenticating at least one of: the deduced information, the deduced information together with date information, and the deduced information together with additional information; and (d) providing the authenticated deduced information.
Claim 77
Independent Claim
98 words
A method for an intermediary to provide certificate information, comprising the steps of: (a) receiving from a first other entity authenticated certificate information; (b) processing at least a portion of the authenticated certificate information to provide deduced information that is not part of the authenticated information; (c) if the deduced information is consistent with the authenticated certificate information, having a plurality of witnesses construct authenticated deduced information by authenticating at least one of: the deduced information, the deduced information together with date information, and the deduced information together with additional information; and (d) providing the authenticated deduced information.
Claim 78
Dependent Claim
14 words
A method according to claim 75, wherein one of the witnesses is the intermediary.
Claim 79
Dependent Claim
15 words
A method according to claim 75, wherein processing is performed by each of the witnesses.
Claim 80
Dependent Claim
17 words
A method according to claim 75, wherein at least two of the witnesses produce a digital signature.
Claim 81
Dependent Claim
25 words
A method according to claim 78, wherein the digital signatures of the at least two of the witnesses are combined into a single digital signature.
Claim 82
Independent Claim
95 words
A method for an intermediary to provide certificate information, comprising the steps of: (a) receiving from a first other entity authenticated certificate information; (b) processing at least a portion of the authenticated certificate information to provide deduced information that is not part of the authenticated information; (c) if the deduced information is consistent with the authenticated certificate information, having a plurality of witnesses contribute to authenticating at least one of: the deduced information, the deduced information together with date information, and the deduced information together with additional information; and (d) providing the authenticated deduced information.
Claim 83
Independent Claim
95 words
A method for an intermediary to provide certificate information, comprising the steps of: (a) receiving from a first other entity authenticated certificate information; (b) processing at least a portion of the authenticated certificate information to provide deduced information that is not part of the authenticated information; (c) if the deduced information is consistent with the authenticated certificate information, having a plurality of witnesses contribute to authenticating at least one of: the deduced information, the deduced information together with date information, and the deduced information together with additional information; and (d) providing the authenticated deduced information.
Claim 84
Dependent Claim
21 words
A method according to claim 80, wherein at least two of the witnesses have a portion of a secret signing key.
Claim 85
Dependent Claim
45 words
A method according to claim 80, further comprising the step of: (e) having at least two of the witnesses contribute a digital signature of at least one of:the deduced information, the deduced information together with date information, and the deduced information together with additional information.
Claim 86
Dependent Claim
27 words
A method according to claim 82, further comprising the step of: (f) combining digital signatures of at least two of the witnesses into a single digital signature.
Claim 87
Dependent Claim
23 words
A method according to claim 83, further comprising the step of: (g) using a t-out-of-n digital signature scheme to combine the digital signatures.
Claim 88
Dependent Claim
10 words
A method according to claim 84, wherein t equals n.
References Cited (Backward Citations)
US4943707A
Cited
USRE34954E
Cited
US5136647A
Cited
US5315657A
Cited
US5396624A
Cited
US5136646A
Cited
US5340969A
Cited
US5497422A
Cited
US5450493A
Cited
US5434919A
Cited
US5537475A
Cited
US5606617A
Cited
US5615268A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-02-09 | 2001-08-11 | 2002-02-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-02-09 | 2005-08-11 | 2006-02-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-02-09 | 2009-08-11 | 2010-02-10 | $7700.00 | Window Closed / Lapsed |