Certificate Status Determining Method
AssigneeHuawei Technologies Co., Ltd.
InventorsFei Li, Jintao Zhu, Chengdong He, Tao Bai
Life of this patent
Estimating the term…
Abstract
In a method for enabling a message receive end to quickly confirm a certificate status, a defined field of a certificate includes classification information of the certificate, and a defined field of a certificate revocation list includes classification information of a revoked certificate, so that the receive end can quickly narrow a searching or matching range in massive records of the certificate revocation list based on the classification information carried in the certificate of a transmit end.
Claims20
A method implemented by a receive end and comprising:
- receiving, from a transmit end, a message comprising a certificate of the transmit end, wherein the certificate comprises first classification information;
- determining, based on the first classification information, a set of revocation identifiers in a certificate revocation list, wherein the revocation identifiers comprise a first revocation identifier identifying a first revoked certificate in the certificate revocation list, wherein the first revocation identifier comprises second classification information of the first revoked certificate, and wherein the second classification information is the same as the first classification information;
- and
- extracting first feature information of the certificate;
- performing matching of the first feature information with second feature information of the first revoked certificate;
- and
- determining, based on a result of the matching, a status of the certificate.
A method implemented by a receive end and comprising:
- receiving, from a transmit end, a message comprising a certificate of the transmit end;
- calculating first fingerprint information of the certificate based on the certificate;
- determining that second fingerprint information of a revoked certificate in a certificate revocation fingerprint library matches the first fingerprint information;
- sending, to a certificate revocation server, the certificate to request verification of a status of the certificate;
- receiving, from the certificate revocation server in response to the certificate, a verification result;
- and
- determining the status based on the verification result.
A method implemented by a certificate revocation server and comprising:
- receiving a message requesting invocation of a certificate, comprising the certificate, and comprising classification information of the certificate;
- extracting, in response to the message, the classification information and feature information from the certificate;
- and
- recording the classification information and the feature information in a certificate revocation list.
A vehicle-to-everything (V2X) communications unit comprising:
- an interface configured to receive, from a transmit end, a message comprising a certificate of the transmit end, wherein the certificate comprises first classification information;
- and
- a processor coupled to the interface and configured to:
- determine, based on the first classification information, a set of revocation identifiers in a certificate revocation list, wherein the revocation identifiers comprise a first revocation identifier identifying a first revoked certificate in the certificate revocation list, wherein the first revocation identifier comprises second classification information of the first revoked certificate, and wherein the second classification information is the same as the first classification information;
- and
- extract first feature information of the certificate;
- perform matching of the first feature information with second feature information of the first revoked certificate;
- and
- determine, based on a result of the matching, a status of the certificate.
Dependencies are inferred from the claim text.