Method and apparatus for certificate roll-over
AssigneeSony Ericsson Mobile Communications AB
InventorsStefan Andersson, Janne Karppinen
Life of this patent
Estimating the term…
Abstract
A method and an electronic apparatus for rolling over from a first to second trusted certificate in the electronic apparatus. Information containing identification data for identifying the second trusted certificate is acquired in the electronic apparatus. Also, the second trusted certificate, which is preinstalled in the electronic apparatus, is activated based on said identification data.
Claims19
A method for rolling over from a first to second trusted certificate in an electronic apparatus;
- comprising
- acquiring in the electronic apparatus information containing identification data for identifying the second trusted certificate;
- and
- activating the second trusted certificate, which is preinstalled in the electronic apparatus, based on said identification data, and wherein the step of activating comprises a replay protection check as well as
- determining whether a value of said identification data exceeds a certificate counter value, wherein the certificate counter value identifies the first trusted certificate in an array of trusted certificates, and only activating the second trusted certificate if the value of said identification data exceeds said certificate counter value, wherein the value of the identification data is an identifier or number which identifies the location of the second trusted certificate to activate within the array.
An electronic apparatus for rolling over from a first to second trusted certificate, comprising
- an information acquiring unit adapted to acquire information containing identification data for identifying the second trusted certificate;
- and
- a roll-over unit adapted to activate the second trusted certificate, which is preinstalled in the electronic apparatus, based on said identification data, and wherein the roll-over unit further is adapted to make a replay protection check as well as adapted to determine whether a value of said identification data exceeds a certificate counter value, wherein the certificate counter value identifies the first trusted certificate in an array of trusted certificates, and only activating the second trusted certificate if the value of said identification data exceeds said certificate counter value, wherein the value of the identification data is an identifier or number which identifies the location of the second trusted certificate to activate within the array.
Dependencies are inferred from the claim text.