Scalable certificate management system architectures

A method for securely providing certificates, the method comprising:

• performing cryptographic computations requested by a registration authority application that is communicatively connected to one or more compute engines that perform cryptographic computations requested by the registration authority application;
• performing cryptographic computations requested by an enrollment certificate authority application that is communicatively connected to one or more compute engines that perform cryptographic computations requested by the enrollment certificate authority application, wherein the enrollment certificate authority application generates and conditionally transmits enrollment certificates to the registration authority application;
• performing cryptographic computations requested by a pseudonym certificate authority application that is communicatively connected to one or more compute engines that perform cryptographic computations requested by the pseudonym certificate authority application, wherein the pseudonym certificate authority application generates and conditionally transmits pseudonym certificates to the registration authority application;
• performing cryptographic computations requested by a first linkage authority application that is communicatively connected to one or more compute engines that perform cryptographic computations requested by the first linkage authority application;
• performing cryptographic computations requested by a second linkage authority application that is communicatively connected to one or more compute engines that perform cryptographic computations requested by the second linkage authority application, wherein the first linkage authority application and the second linkage authority application generate and conditionally transmit linkage values to the registration authority application;
• and
• assigning one or more certificate loads to each computerized device of a plurality of computerized devices, the one or more certificate loads indicating a number of the pseudonym certificates to be stored within each computerized device during a time period, wherein the certificate load is assignable so that each of the computerized devices can have a number of the pseudonym certificates stored during the time period different from other ones of the computerized devices, and
• wherein one or more load balancers communicatively connected to the one or more compute engines performs operations comprising distributing at least one request to the one or more compute engines based on a health measurement of the one or more compute engines.

A non-transitory computer-readable medium for securely providing certificates, the non-transitory computer-readable medium comprising a plurality of instructions that, in response to execution by a processor, cause the processor to perform operations comprising:

• performing cryptographic computations requested by a registration authority application;
• performing cryptographic computations requested by an enrollment certificate authority application, wherein the enrollment certificate authority application generates and conditionally transmits enrollment certificates to the registration authority application;
• performing cryptographic computations requested by a pseudonym certificate authority application, wherein the pseudonym certificate authority application generates and conditionally transmits pseudonym certificates to the registration authority application;
• performing cryptographic computations requested by a first linkage authority application;
• performing cryptographic computations requested by a second linkage authority application, wherein the first linkage authority application and the second linkage authority application generate and conditionally transmit linkage values to the registration authority application;
• and
• assigning one or more certificate loads to each computerized device of a plurality of computerized devices, the one or more certificate loads indicating a number of the pseudonym certificates to be stored within each computerized device during a time period, wherein the one or more certificate loads are assignable so that each of the computerized devices can have a number of the pseudonym certificates stored during the time period different from other ones of the computerized devices, and
• wherein one or more load balancers communicatively connected to the one or more compute engines performs operations comprising distributing at least one request to the one or more compute engines based on a health measurement of the one or more compute engines.