Optimization for security certificates management
OwnerCedric Westphal, Hannu Flinckinventors
Life of this patent
Estimating the term…
Abstract
A method, computer program for authenticating an entity in a communication network system and the entity itself. In the invention certificates of a first entity are provided which is to be authenticated by a second entity based on a certificate common to the first and second entities, the certificates of the first entity are classified as a function of probability that a second entity includes a given certificate, and in response to a certificate request by a second entity, the classified certificate with highest probability is submitted to the second entity.
Claims24
A method of authenticating an entity in a communication network system, comprising the steps of:
- providing certificates of a first entity to be authenticated by a second entity on the basis of a certificate common to the first and second entities;
- classifying the certificates of the first entity as a function of probability that a second entity includes a given certificate;
- and
- in response to a certificate request by a second entity, submitting the classified certificate with highest probability to the second entity.
An entity of a communication network system, comprising:
- storage means for storing certificates of the entity to be authenticated by another entity of the communication network system based on a certificate common to both entities;
- classification means for classifying the certificates of the entity as a function of probability that another entity includes a given certificate;
- and
- in response to a certificate request by another entity, submission means for submitting the classified certificate with highest probability to the other entity.
A computer program product comprising software code portions for performing the steps, when run on a computer of:
- providing certificates of a first entity to be authenticated by a second entity on the basis of a certificate common to the first and second entities;
- classifying the certificates of the first entity as a function of probability that a second entity includes a given certificate;
- and
- in response to a certificate request by a second entity, submitting the classified certificate with highest probability to the second entity.
Dependencies are inferred from the claim text.