Certificates for low-power or low-memory devices
AssigneeGoogle Inc.
InventorJay D. Logue
Life of this patent
Estimating the term…
Abstract
Compact certificate formats that may be used in a fabric or network between devices. The compact format includes a serial number field tagged with a tag of 1, a signature algorithm field tagged with a tag of 2, an issuer field tagged with a tag of 3, an encoded version of a public key tagged with a tag of A, and a signature field tagged with a tag of C. Each field includes the respective tags and corresponding values encoded in a tag-length-value (TLV) format, and each tag value is represented in hexadecimal.
Claims20
A non-transitory computer-readable medium having stored thereon a certificate in a compact format, wherein the certificate comprises, in the following order:
- a serial number field tagged with a tag of 1 in hexadecimal that uniquely identifies the certificate as issued by a certificate authority;
- a signature algorithm field tagged with a tag of 2 in hexadecimal that indicates a type of signature algorithm used to generate the signature;
- an issuer field tagged with a tag of 3 in hexadecimal that includes a path that identifies the issuer for the certificate;
- an encoded version of a public key tagged with a tag of A in hexadecimal;
- and
- a signature field tagged with a tag of C in hexadecimal, wherein each field includes the respective tags and corresponding values encoded in a tag-length-value (TLV) format.
An electronic device comprising:
- a power source;
- a memory;
- and
- a processor, where configured to authenticate a certificate in a compact format, wherein the certificate comprises:
- a serial number field tagged with a tag of 1 in hexadecimal that uniquely identifies the certificate as issued by a certificate authority;
- a signature algorithm field tagged with a tag of 2 in hexadecimal that indicates a type of signature algorithm used to generate the signature;
- an issuer field tagged with a tag of 3 in hexadecimal that includes a path that identifies the issuer for the certificate;
- an encoded version of a public key tagged with a tag of A in hexadecimal;
- and
- a signature field tagged with a tag of C in hexadecimal, wherein each field includes the respective tags and corresponding values encoded in a tag-length-value (TLV) format.
A method comprising:
- sending a message including a certificate, wherein the certificate includes:
- a serial number field tagged with a tag of 1 in hexadecimal that uniquely identifies the certificate as issued by a certificate authority;
- a signature algorithm field tagged with a tag of 2 in hexadecimal that indicates a type of signature algorithm used to generate the signature;
- an issuer field tagged with a tag of 3 in hexadecimal that includes a path that identifies the issuer for the certificate;
- an encoded version of a public key tagged with a tag of A in hexadecimal;
- and
- a signature field tagged with a tag of C in hexadecimal, wherein each field includes the respective tags and corresponding values encoded in a tag-length-value (TLV) format.
Dependencies are inferred from the claim text.