Certificates for low-power or low-memory devices
AssigneeGoogle Inc.
InventorJay D. Logue
Life of this patent
Estimating the term…
Abstract
Methods and systems for generating or validating compact certificates include receiving a first format of the certificate. Moreover, obtain a signature for the certificate in the first format. For each field of the certificate decode the field to obtain a value for the field from the first format and encoding the value for the field into a second format. Decoding and encoding for each field is done incrementally in the same order of the fields as the first format. In other words, a next field is not decoded from the first format until the field is encoded in the second format. Furthermore, a security envelope is encoded using the signature in the first format and the fields.
Claims20
A method for validating a compact format certificate, comprising:
- receiving a signature in a standardized format;
- receiving certificate data encoded in a compact format having a plurality of fields in a field order;
- decoding a field of the plurality of fields of the certificate data from the compact format;
- after decoding the field, encoding the field of the certificate data into the standardized format in the field order;
- and
- verifying authority using the signature and the certificate data both encoded in the standardized format.
Non-transitory, computer-readable medium comprising instructions configured to cause a processor to:
- receive a signature in a standardized format;
- receive certificate data encoded in a compact format having a plurality of fields in a field order;
- decode a field of the plurality of fields of the certificate data from the compact format;
- after decoding the field, encode the field of the certificate data into the standardized format in the field order;
- and
- verify authority using the signature and the certificate data both encoded in the standardized format.
An electronic device comprising:
- a power source;
- a processor;
- and
- a memory, wherein the memory store instructions configured to cause the processor to:
- receive a signature in a first format;
- receive certificate data encoded in a second format having a plurality of fields arranged in a field order;
- decode one or more fields of the plurality of fields of the certificate data from the second format;
- encode the one or more fields of the certificate data into the first format in the field order;
- and
- verify authority using the signature and the certificate data both encoded in the first format.
Dependencies are inferred from the claim text.