Using a single certificate request to generate credentials with multiple ecqv certificates
AssigneeCerticom Corp.
InventorsMatthew John Campagna, Robert John Lambert, James Robert Alfred
Life of this patent
Estimating the term…
Abstract
A method and apparatus are disclosed for using a single credential request (e.g., registered public key or ECQV certificate) to obtain a plurality of credentials in a secure digital communication system having a plurality of trusted certificate authority CA entities and one or more subscriber entities A. In this way, entity A can be provisioned onto multiple PKI networks by leveraging a single registered public key or implicit certificate as a credential request to one or more CA entities to obtain additional credentials, where each additional credential can be used to derive additional public key-private key pairs for the entity A.
Claims19
1-24. (canceled)
A non-transitory computer-readable medium storing program instructions that, when executed by a processing circuit, cause the processing circuit to perform a method for generating a plurality of unique credentials from a single credential request value in a secure digital communication system having a plurality of trusted entities and at least one subscriber device, the method comprising:
- obtaining a secret value and associated public value for a subscriber device;
- sending, by an input/output circuit of the subscriber device, a single credential request to the plurality of trusted entities, the single credential request comprising a first value associated with the public value;
- and
- receiving, from each of the plurality of trusted entities, by the input/output circuit of the subscriber device, a unique credential and associated private key contribution value, thereby obtaining a plurality of unique credentials from the corresponding plurality of trusted entities.
A non-transitory computer-readable medium storing program instructions that, when executed by a processing circuit, cause the processing circuit to perform a method for generating a unique credential at a trusted entity device in a secure digital communication system, the method comprising:
- obtaining at the trusted entity device an implicit certificate associated with a private key of a first entity;
- transforming, by a circuit of the trusted entity device, the implicit certificate into a unique credential and associated private key contribution value, wherein the transforming step includes
- extracting a first public value from the implicit certificate;
- computing a public reconstruction value by mathematically combining the first public value with one or more public values associated with the trusted entity device;
- and
- sending the unique credential and associated private key contribution value to the first entity.
Dependencies are inferred from the claim text.