Accelerating ocsp responses via content delivery network collaboration
AssigneeDigiCert, Inc.
InventorsRichard F. Andrews, Quentin Liu
Life of this patent
Estimating the term…
Abstract
Techniques are disclosed for accelerating online certificate status protocol (OCSP) response distribution to relying parties using a content delivery network (CDN). A certificate authority generates updated OCSP responses for OCSP responses cached in the CDN that are about to expire. In addition, the certificate authority pre-generates cache keys in place of CDNs generating the keys. The certificate authority sends the OCSP responses and the cache keys in one transaction, and the CDN, in turn, consumes the new OCSP responses using the cache keys.
Claims1
A computer-implemented method for distributing certificate validity messages to a content delivery network (CDN), the method comprising:
- identifying, via a processor, a set of certificate validity messages to update;
- generating, for each certificate validity message in the set, an updated certificate validity message to replace each certificate validity message;
- generating, for each updated certificate validity message, an associated cache key, wherein the CDN uses the cache key to store the updated certificate validity message into a cache;
- and
- sending the updated certificate validity messages and associated cache keys to the CDN.
Dependencies are inferred from the claim text.