Certificates for low-power or low-memory devices
AssigneeGoogle Inc.
InventorJay D. Logue
Life of this patent
Estimating the term…
Abstract
Methods and systems for generating or validating compact certificates include receiving a first format of the certificate. Moreover, obtain a signature for the certificate in the first format. For each field of the certificate decode the field to obtain a value for the field from the first format and encoding the value for the field into a second format. Decoding and encoding for each field is done incrementally in the same order of the fields as the first format. In other words, a next field is not decoded from the first format until the field is encoded in the second format. Furthermore, a security envelope is encoded using the signature in the first format and the fields.
Claims23
A method for generating a compact certificate, comprising:
- determining certificate data, wherein the certificate data comprises a plurality of fields in a field order;
- encoding at least some of the certificate data into a first format resulting in encoded certificate data;
- generating a signature for the certificate based on the encoded certificate data;
- compressing at least some of the certificate data resulting in compressed certificated data, wherein the compressed certificate data includes all information contained in the plurality of fields, and wherein compressing at least some of the certificate data includes, for each at least some of the plurality of fields of the certificate data:
- determining a value for the field;
- encoding the value for the field into a second format different than the first format;
- and
- combining the compressed certificate data with the signature.
(canceled)
Non-transitory, computer-readable medium comprising instructions configured to cause a processor to:
- determine certificate data, wherein the certificate data comprises a plurality of fields in a field order;
- encode at least some of the certificate data into a first format resulting in encoded certificate data;
- generate a signature for the certificate based on the encoded certificate data;
- compress at least some of the certificate data resulting in compressed certificated data, wherein the compressed certificate data includes all information contained in the plurality of fields, and wherein compressing at least some of the certificate data includes, for each at least some of the plurality of fields of the certificate data:
- determine a value for the field;
- encode the value for the field into a second format different than the first format;
- and
- combine the compressed certificate data with the signature.
(canceled)
An electronic device, comprising:
- a memory;
- and
- a processor, wherein the processor is configured to:
- determine certificate data, wherein the certificate data comprises a plurality of fields in a field order;
- encode at least some of the certificate data into a first format resulting in encoded certificate data;
- generate a signature for the certificate based on the encoded certificate data;
- compress at least some of the certificate data resulting in compressed certificated data, wherein the compressed certificate data includes all information contained in the plurality of fields, and wherein compressing at least some of the certificate data includes, for each at least some of the plurality of fields of the certificate data:
- determine a value for the field;
- encode the value for the field into a second format different than the first format;
- and
- combine the compressed certificate data with the signature.
(canceled)
Dependencies are inferred from the claim text.