Accelerating ocsp responses via content delivery network collaboration
AssigneeDigiCert, Inc.
InventorsRichard F. Andrews, Quentin Liu
Life of this patent
Estimating the term…
Abstract
Techniques are disclosed for accelerating online certificate status protocol (OCSP) response distribution to relying parties using a content delivery network (CDN). A certificate authority generates updated OCSP responses for OCSP responses cached in the CDN that are about to expire. In addition, the certificate authority pre-generates cache keys in place of CDNs generating the keys. The certificate authority sends the OCSP responses and the cache keys in one transaction, and the CDN, in turn, consumes the new OCSP responses using the cache keys.
Claims21
-20. (canceled)
A computer-implemented method for distributing certificate validity messages to a first computing device associated with a content delivery network (CDN), the computer-implemented method comprising:
- generating, at a second computing device associated with a certificate authority (CA), a plurality of certificate validity messages;
- determining, by the second computing device, at least one certificate validity message of the plurality of certificate validity messages to transmit to the first computing device;
- and
- prior to receiving a request for the at least one certificate validity message from the first computing device, transmitting, the at least one certificate validity message from the second computing device to the first computing device, wherein the first computing device stores the at least one certificate validity message in a cache of the first computing device.
A non-transitory, computer-readable storage media storing instructions, which, when executed on a processor, cause the processor to:
- generate, at a second computing device associated with a certificate authority (CA), a plurality of certificate validity messages;
- determine, by the second computing device, at least one certificate validity message of the plurality of certificate validity messages to transmit to a first computing device associated with a content delivery network (CDN);
- and
- prior to receiving a request for the at least one certificate validity message from the first computing device, transmit, the at least one certificate validity message from the second computing device to the first computing device, wherein the first computing device stores the at least one certificate validity message in a cache of the first computing device.
A system, comprising:
- a processor and a memory hosting an application, which, when executed on the processor, causes the processor to:
- generate, at a second computing device associated with a certificate authority (CA), a plurality of certificate validity messages;
- determine, by the second computing device, at least one certificate validity message of the plurality of certificate validity messages to transmit to a first computing device associated with a content delivery network (CDN);
- and
- prior to receiving a request for the at least one certificate validity message from the first computing device, transmit, the at least one certificate validity message from the second computing device to the first computing device, wherein
- the first computing device stores the at least one certificate validity message in a cache of the first computing device.
Dependencies are inferred from the claim text.