Cryptographic methods and systems using activation codes for digital certificate revocation
AssigneesLG Electronics Inc., University of Sao Paulo
InventorsMarcos A. Simplicio, Eduardo Lopes Cominetti, Harsh Kupwade Patil, Jefferson E. Ricardini, Marcos Vinicius M. Silva
Life of this patent
Estimating the term…
Abstract
To revoke a digital certificate, activation of the digital certificate is blocked by withholding an activation code from the certificate user. The certificates are generated by a plurality of entities in a robust process that preserves user privacy (e.g. anonymity) even in case of collusion of some of the entities. The process is suitable for connected vehicles, e.g. as an improvement for Security Credential Management System (SCMS).
Claims20
A method for digital certificate management, the digital certificates being for use in authentication operations by entities operable to perform computing on digital values and to communicate with each other, wherein each digital certificate cannot be used until activated by an activation code associated with the digital certificate, the method comprising:
- receiving, by a registration authority (RA), one or more certificate requests from one or more entities, each certificate request requesting one or more digital certificates for the associated entity;
- for each certificate request, performing operations of:
- obtaining by the RA, using information on the associated entity, node value data associated with the entity;
- generating, by the RA, one or more certificate generation requests, each certificate generation request comprising one or more associated activation codes generated for the node value data;
- sending to a certificate authority (CA), by the RA, each certificate generation request, wherein the CA is unable to link the certificate generation request to the associated entity;
- wherein the CA is operable to generate, from each certificate generation request, a digital encrypted package comprising an associated digital certificate which is recoverable by a respective entity using an activation code generated for node value data associated with the entity.
A method for digital certificate management, the digital certificates being for use in authentication operations by entities operable to perform computing on digital values and to communicate with each other, wherein each digital certificate cannot be used until activated by an activation code associated with the digital certificate, the method comprising:
- transmitting a certificate request by a first entity to a registration authority (RA), the certificate request requesting one or more digital certificates for the first entity;
- wherein responsive to the certificate request the RA obtains node value data associated with the first entity using information on the first entity, transmits a certificate generation request to a certificate authority (CA), each certificate generation request comprising one or more associated activation codes generated for the note value data:
- wherein the CA is unable to link the certificate generation request to the first entity and is operable to generate from the certificate generation request a digital encrypted package comprising an associated digital certificate;
- and
- receiving the digital encrypted package by the first entity, wherein the first entity is operable to recover the associated digital certificate using an activation code generated for node value data associated with the first entity.
Dependencies are inferred from the claim text.