Validating certificate bundles with asymmetric keys
AssigneeOracle International Corporation
InventorsBurak Uzun, Mauruthi Geetha Mohan, Tony Long, Owen Cliffe
Life of this patent
Estimating the term…
Abstract
Operations of a certificate bundle validation service may include receiving a first certificate bundle that includes a first set of one or more digital certificates, and a digital signature, associated with the first certificate bundle; determining, using a public key of an asymmetric key pair associated with a second set of one or more digital certificates, that the digital signature is generated using a private key of the asymmetric key pair; and responsive to determining that the digital signature is generated using the private key, storing the first certificate bundle in a certificate repository as a trusted certificate bundle.
Claims31
One or more non-transitory computer-readable media storing instructions, which when executed by one or more hardware processors, cause performance of operations comprising:
- receiving a first certificate bundle and a digital signature associated with the first certificate bundle,
- wherein the first certificate bundle comprises a first set of one or more digital certificates;
- determining, using a public key of an asymmetric key pair associated with a second certificate bundle comprising a second set of one or more digital certificates, that the digital signature is generated using a private key of the asymmetric key pair;
- responsive to determining that the digital signature is generated using the private key:
- storing the first certificate bundle in a certificate repository as a trusted certificate bundle, and
- updating a data structure associated with the certificate repository to identify the first certificate bundle as a current certificate bundle and the second certificate bundle as a first untrusted certificate bundle;
- based on the first certificate bundle being identified in the data structure as the current certificate bundle, distributing the first certificate bundle to one or more network entities associated with a virtual cloud network.
A method, comprising:
- receiving a first certificate bundle and a digital signature associated with the first certificate bundle,
- wherein the first certificate bundle comprises a first set of one or more digital certificates, and
- wherein the digital signature is generated using a private key of an asymmetric key pair associated with a second certificate bundle comprising a second set of one or more digital certificates;
- determining, using a public key of the asymmetric key pair associated with the second certificate bundle comprising the second set of one or more digital certificates, that the digital signature is generated using the private key;
- responsive to determining that the digital signature is generated using the private key:
- storing the first certificate bundle in a certificate repository as a trusted certificate bundle, and
- updating a data structure associated with the certificate repository to identify the first certificate bundle as a current certificate bundle and the second certificate bundle as an untrusted certificate bundle;
- based on the first certificate bundle being identified in the data structure as the current certificate bundle, distributing the first certificate bundle to one or more network entities associated with a virtual cloud network;
- wherein the method is performed by at least one device including a hardware processor.
A system comprising:
- at least one hardware processor;
- the system being configured to execute operations, using the at least one hardware processor, the operations comprising:
- receiving a first certificate bundle and a digital signature associated with the first certificate bundle,
- wherein the first certificate bundle comprises a first set of one or more digital certificates, and
- wherein the digital signature is generated using a private key of an asymmetric key pair associated with a second certificate bundle comprising a second set of one or more digital certificates;
- determining, using a public key of the asymmetric key pair associated with the second certificate bundle comprising the second set of one or more digital certificates, that the digital signature is generated using the private key;
- responsive to determining that the digital signature is generated using the private key:
- storing the first certificate bundle in a certificate repository as a trusted certificate bundle, and
- updating a data structure associated with the certificate repository to identify the first certificate bundle as a current certificate bundle and the second certificate bundle as an untrusted certificate bundle;
- based on the first certificate bundle being identified in the data structure as the current certificate bundle, distributing the first certificate bundle to one or more network entities associated with a virtual cloud network.
Dependencies are inferred from the claim text.