Revocation method and apparatus for secure content

An apparatus for revoking a host, the apparatus comprising:

• means for receiving a certificate from a host, the certificate including a plurality of fields including a field holding a protocol public key signed by a certifying authority;
• means for verifying signatures on the certificate, the verifying including:
• verifying the certifying authority signature using the protocol public key;
• and verifying a host signature using a host public key on the certificate;
• and
• means for receiving validation data from a source, the validation data identifying one or more data on the certificate as valid or invalid according to a revocation list;
• and
• means for preventing the transmission of a session key to the host to establish a secure communication channel if the signatures are invalid.

An engine configured to revoke a host, the engine comprising:

• a block configured to receive a certificate from a host, the certificate including a plurality of fields including a field holding a protocol public key signed by a certifying authority;
• a block configured to verify signatures on the certificate, the verifying including:
• verifying the certifying authority signature using the protocol public key;
• and verifying a host signature using a host public key on the certificate;
• and
• a block configured to receive validation data from a source, the validation data identifying one or more data on the certificate as valid or invalid according to a revocation list;
• and
• a block configured to preventing the transmission of a session key to the host to establish a secure communication channel if the signatures are invalid.

A computer program product, the computer program product comprising:

• signal bearing media bearing digital information adapted to be operable with a firmware), the digital information including programming including:
• a block configured to receive a certificate from a host, the certificate including a plurality of fields including a field holding a protocol public key signed by a certifying authority;
• a block configured to verify signatures on the certificate, the verifying including:
• verifying the certifying authority signature using the protocol public key;
• and
• verifying a host signature using a host public key on the certificate;
• and
• a block configured to receive validation data from a source, the validation data identifying one or more data on the certificate as valid or invalid according to a revocation list;
• and
• a block configured to preventing the transmission of a session key to the host to establish a secure communication channel if the signatures are invalid.