Lifecycle management method and apparatus for trusted certificates and trust chains
AssigneeMotorola Solutions, Inc.
InventorsWojciech Kucharski, Elizeusz Musial, Andrzej Grzesik, Marcin Tomasik, Chris A. Kruegel
Life of this patent
Estimating the term…
Abstract
A method and apparatus is provided for updating certificates in a trust chain and managing versions of the trust chain. A first electronic processor determines that a first certificate in a first level of the trust chain is to be updated, updating the first certificate and each certificate in a lower level in the trust chain that is lower than the first level, creates a second version of the trust chain including an updated first certificate and an updated certificate at each lower level in the trust chain, and transmits the second version of the trust chain to one or more entities.
Claims19
A method of updating certificates in a trust chain including certificates in a hierarchical order and managing versions of the trust chain, comprising:
- determining, by a first electronic processor, that a first certificate in a first level in a hierarchy of a first version of the trust chain is to be updated;
- updating, by the first electronic processor, the first certificate and each certificate in a lower level in the hierarchy of the first version of the trust chain that is lower than the first level;
- creating, by the first electronic processor, a second version of the trust chain including the updated first certificate and the updated certificate at each lower level in the hierarchy of the trust chain;
- transmitting, by the first electronic processor, the second version of the trust chain to one or more entities;
- and
- deactivating the first version of the trust chain subsequent to determining that the one or more entities have migrated to the second version of the trust chain or after a predefined period after creating the second version of the trust chain.
An electronic processor configured to update certificates in a trust chain including certificates in a hierarchical order and manage versions of the trust chain, comprising:
- a memory storing non-transitory computer-executable instructions;
- a transceiver;
- and
- wherein the electronic processor is configured to perform a set of functions in response to executing the computer-executable instructions, the set of functions including:
- determining that a first certificate in a first level in a hierarchy of a first version of the trust chain is to be updated;
- updating the first certificate and each certificate in a lower level in the hierarchy of the first version of the trust chain that is lower than the first level;
- creating a second version of the trust chain including the updated first certificate and the updated certificate at each lower level in the hierarch of the trust chain;
- transmitting the second version of the trust chain to one or more entities;
- and
- deactivating the first version of the trust chain subsequent to determining that the one or more entities have migrated to the second version of the trust chain or after a predefined period after creating the second version of the trust chain.
Dependencies are inferred from the claim text.