Content control method using certificate revocation lists
OwnerRotem Sela, Ron Barzilai +3inventors
InventorsRotem Sela, Ron Barzilai, Michael Holtzman, Avraham Shmuel, Jason T. Lin
Life of this patent
Estimating the term…
Abstract
Host devices present both the host certificate and the pertinent certificate revocation lists to the memory device for authentication so that the memory device need not obtain the list on its own. Processing of the certificate revocation list and searching for the certificate identification may be performed concurrently by the memory device. The certificate revocation lists for authenticating host devices to memory devices may be stored in an unsecured area of the memory device for convenience of users.
Claims16
A method for determining if a certificate is revoked, the method comprising:
- performing in a non-volatile storage device while it is operatively coupled to a host:
- (a) receiving a certificate from the host for attempting to authenticate it to the non-volatile storage device, and
- (b) determining if the certificate is revoked by searching for a reference to the certificate in a certificate revocation list cached in the non-volatile storage device, wherein the certificate revocation list is cached and current prior to the non-volatile storage device receiving the certificate for attempting to authenticate the host to the non-volatile storage device.
A non-volatile storage device comprising:
- a memory configured to store a certificate revocation list;
- and
- a controller operative to:
- (a) receive a certificate from the host for attempting to authenticate it to the non-volatile storage device, and
- (b) determine if the certificate is revoked by searching for a reference to the certificate in a certificate revocation list cached in the non-volatile storage device, wherein the certificate revocation list is cached and current prior to the non-volatile storage device receiving the certificate for attempting to authenticate the host to the non-volatile storage device.
Dependencies are inferred from the claim text.