# US 2022/0045870 A1 · Method and system for intelligent transportation system certificate revocation list reduction > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2022/0045870 A1 - Document ID: US20220045870A1 - Status: Published application - Kind: A1 - Application number: 17/506,549 - Filed: 2021-10-20 - Published: 2022-02-10 - Earliest claimed: 2018-09-28 - Assignees: BlackBerry Limited - Applicants: BlackBerry Limited - Inventors: Nicholas James Russell; Jonathon Brookfield; Stephen John Barrett - Web page: https://patentgrep.com/patent/US20220045870A1 ## CPC - H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]} - H04L 9/321: {involving a third party or a trusted authority} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 65/1045: Proxies, e.g. for session initiation protocol [SIP] - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04L 67/52: specially adapted for the location of the user terminal - H04W 4/40: for vehicles, e.g. vehicle-to-pedestrians [V2P] - H04W 12/082: using revocation of authorisation - H04W 12/37: Managing security policies for mobile devices or for controlling mobile applications - H04L 65/1104: Session initiation protocol [SIP] - H04L 2101/654: International mobile subscriber identity [IMSI] numbers - H04W 4/06: Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services - H04W 4/44: for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H] - H04W 4/46: for vehicle-to-vehicle communication [V2V] - H04W 4/48: for in-vehicle communication - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method at a computing device within an Intelligent Transportation System (ITS), the method including: receiving a first message, the first message including at least tailoring information for a first ITS endpoint and intended journey details for the first ITS endpoint; storing all or a subset of data from the first message; obtaining a full certificate revocation list; creating a tailored certificate revocation list based on data in the first message and the full certificate revocation list, the tailored certificate revocation list containing certificates or identifiers of certificates for ITS endpoints that may be encountered by the first ITS endpoint when navigating a route provided in the intended journey details; and providing the tailored certificate revocation list to the first ITS endpoint. ## Claims ### Claim 1 A method at a computing device within a vehicle Intelligent Transportation System (ITS) endpoint, the method comprising: receiving a trigger event; based on the trigger event, composing a first message, the first message including at least tailoring information for the endpoint and intended journey details for the endpoint, the intended journey details comprising at least one time stamp, each time stamp of the at least one time stamp being associated with a geographic location, where the tailoring information comprises one or more of: location information for the endpoint; one or more endpoint identifiers belonging to the endpoint; or one or more certificates or identities of ITS endpoints that have communicated with the endpoint within a threshold time period; sending the first message to a certificate revocation list (CRL) provisioning server; and receiving, from the CRL provisioning server, a tailored certificate revocation list. ### Claim 2 (depends on 1) The method of claim 1, wherein the trigger event is an expiration of a time limit for a CRL previously received at the endpoint. ### Claim 3 (depends on 1) The method of claim 1, wherein the trigger event is a location of the endpoint being outside a geographical area limit. ### Claim 4 (depends on 1) The method of claim 1, wherein the trigger event is a receipt of a message from a second endpoint containing a certificate not within a previously received CRL. ### Claim 5 (depends on 1) The method of claim 1, further comprising, based on the triggering event, determining one or more addresses for a certificate revocation list (CRL) provisioning server to connect with. ### Claim 6 (depends on 1) The method of claim 1, wherein the one or more endpoint identifiers belonging to the endpoint include one or more of: certificates or fields of certificates associated with the first ITS endpoint; International Mobile Subscriber Identities, Temporary Mobile Subscriber Identities, Packet- Temporary Mobile Subscriber Identities, Globally Unique Temporary User Equipment Identities, or Fifth Generation Globally Unique Temporary User Equipment Identities; equipment identities; Mobile Station International Subscriber Directory Numbers; Internet Protocol addresses or portions of Internet Protocol addresses; Medium Access Control addresses; Session Initiation Protocol Universal Resource Identifiers; or Telephone Universal Resource Identifiers. ### Claim 7 (depends on 1) The method of claim 1, wherein the tailored certificate revocation list includes expiration information. ### Claim 8 (depends on 7) The method of claim 7, wherein the expiration information is an absolute or relative time that the tailored certificate revocation list will expire. ### Claim 9 (depends on 7) The method of claim 7, wherein the expiration information is an absolute or relative geographic boundary, which, when crossed by the endpoint, causes the tailored certificate revocation list to expire. ### Claim 10 A computing device within a vehicle Intelligent Transportation System (ITS) endpoint, the computing device comprising: a processor; and a communications subsystem, wherein the computing device is configured to: receive a trigger event; based on the trigger event, compose a first message, the first message including at least tailoring information for the endpoint and intended journey details for the endpoint, the intended journey details comprising at least one time stamp, each time stamp of the at least one time stamp being associated with a geographic location, where the tailoring information comprises one or more of: location information for the endpoint; one or more endpoint identifiers belonging to the endpoint; or one or more certificates or identities of ITS endpoints that have communicated with the endpoint within a threshold time period; send the first message to a certificate revocation list (CRL) provisioning server; and receive, from the CRL provisioning server, a tailored certificate revocation list. ### Claim 11 (depends on 10) The computing device of claim 10, wherein the trigger event is an expiration of a time limit for a CRL previously received at the endpoint. ### Claim 12 (depends on 10) The computing device of claim 10, wherein the trigger event is a location of the endpoint being outside a geographical area limit. ### Claim 13 (depends on 10) The computing device of claim 10, wherein the trigger event is a receipt of a message from a second endpoint containing a certificate not within a previously received CRL. ### Claim 14 (depends on 10) The computing device of claim 10, wherein the computing device is further configured to, based on the triggering event, determine one or more addresses for a certificate revocation list (CRL) provisioning server to connect with. ### Claim 15 (depends on 10) The computing device of claim 10, wherein the one or more endpoint identifiers belonging to the endpoint include one or more of: certificates or fields of certificates associated with the first ITS endpoint; International Mobile Subscriber Identities, Temporary Mobile Subscriber Identities, Packet-Temporary Mobile Subscriber Identities, Globally Unique Temporary User Equipment Identities, or Fifth Generation Globally Unique Temporary User Equipment Identities; equipment identities; Mobile Station International Subscriber Directory Numbers; Internet Protocol addresses or portions of Internet Protocol addresses; Medium Access Control addresses; Session Initiation Protocol Universal Resource Identifiers; or Telephone Universal Resource Identifiers. ### Claim 16 (depends on 10) The computing device of claim 10, wherein the tailored certificate revocation list includes expiration information. ### Claim 17 (depends on 16) The computing device of claim 16, wherein the expiration information is an absolute or relative time that the tailored certificate revocation list will expire. ### Claim 18 (depends on 16) The computing device of claim 16, wherein the expiration information is an absolute or relative geographic boundary, which, when crossed by the endpoint, causes the tailored certificate revocation list to expire. ### Claim 19 A non-transitory computer readable medium for storing instruction code, which, when executed by a processor of a computing device within a vehicle Intelligent Transportation System (ITS) endpoint cause the computing device to: receive a trigger event; based on the trigger event, compose a first message, the first message including at least tailoring information for the endpoint and intended journey details for the endpoint, the intended journey details comprising at least one time stamp, each time stamp of the at least one time stamp being associated with a geographic location, where the tailoring information comprises one or more of: location information for the endpoint; one or more endpoint identifiers belonging to the endpoint; or one or more certificates or identities of ITS endpoints that have communicated with the endpoint within a threshold time period; send the first message to a certificate revocation list (CRL) provisioning server; and receive, from the CRL provisioning server, a tailored certificate revocation list. ### Claim 20 (depends on 19) The non-transitory computer readable medium of claim 19, wherein the one or more endpoint identifiers belonging to the endpoint include one or more of: certificates or fields of certificates associated with the first ITS endpoint; International Mobile Subscriber Identities, Temporary Mobile Subscriber Identities, Packet-Temporary Mobile Subscriber Identities, Globally Unique Temporary User Equipment Identities, or Fifth Generation Globally Unique Temporary User Equipment Identities; equipment identities; Mobile Station International Subscriber Directory Numbers; Internet Protocol addresses or portions of Internet Protocol addresses; Medium Access Control addresses; Session Initiation Protocol Universal Resource Identifiers; or Telephone Universal Resource Identifiers.