# US 8,788,545 B2 · Calculating state of cryptographic objects and generating search filter for querying cryptographic objects > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,788,545 B2 - Document ID: US8788545B2 - Status: Granted - Kind: B2 - Application number: 12/963,184 - Filed: 2010-12-08 - Published: 2012-06-14 - Granted: 2014-07-22 - Earliest claimed: 2010-12-08 - Assignees: International Business Machines Corporation - Applicants: Mark Braksator; Bruce A. Rich - Inventors: Mark Braksator; Bruce A. Rich - Web page: https://patentgrep.com/patent/US8788545B2 ## CPC - G06F 16/2435: {Active constructs} - G06F 16/24: Querying - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Mechanisms are provided for calculating state of cryptographic objects and generating search filters for querying cryptographic objects based on the given state or on the given combination of unique states. The mechanism to calculate a state of a cryptographic object allows an application or system to resolve the current state of any cryptographic object with the following set of state altering date values: initial date, activation date, deactivation date, compromise date, and destroy date. A processing module may retrieve the state meta-data and calculate the current state of a given cryptographic object. The current state may be, for example, one of the following: unknown, pre-active, active, deactivated, compromised, destroyed, and destroyed-compromised. The mechanism to generate a search filter may generate a search query language (SQL) search filter to query for cryptographic objects using the state altering date values stored for each object. ## Claims ### Claim 1 A method, in a data processing system, for managing cryptographic objects, the method comprising; storing a set of state altering date values in state meta data associated with a cryptographic object in a data store, wherein the set of state altering date values comprises a plurality of state altering date values; retrieving the set of state altering date values from the data store; and determining a state of the cryptographic object based on a combination of the plurality of state altering date values, wherein the set of state altering date value comprises an initial date, an activation date, a deactivation date, a compromise date, and a destroy date, and wherein determining the state of the cryptographic object comprises: responsive to the destroy date being set and the compromise date not being set, determining that the cryptographic object is in a destroyed state; responsive to the destroy date not being set and the compromised date being set, determining that the cryptographic object is in a compromised state; responsive to the deactivation date being set and less than or equal to a current time, determining that the cryptographic object is in a deactivated state; responsive to the deactivation date not being set or greater than the current time and responsive to the activation date being set and less than or equal to the current time, determining that the cryptographic object is in an active state; responsive to the deactivation date not being set or greater than the current time and responsive to the activation date being set and greater than the current time, determining that the cryptographic object is in a pre-active state; and responsive to the deactivation date not being set or greater than the current time and responsive to the activation date not being set and the initial date being set, determining that the cryptographic object is in an active state. ### Claim 2 (depends on 1) The method of claim 1, wherein determining the state of the cryptographic object further comprises: responsive to the deactivation date not being set or greater than the current time and responsive to the activation date not being set and the initial date not being set, determining that the cryptographic object is in an unknown state. ### Claim 3 (depends on 1) The method of claim 1, further comprising: generating a search filter to query for cryptographic objects using the set of state altering date values stored for each cryptographic object in the data store, wherein the search filter returns cryptographic objects that are in a given state or a combination of unique states. ### Claim 4 (depends on 3) The method of claim 3, wherein generating the search filter to query for cryptographic objects comprises: for each search criteria element, locating corresponding search query condition logic and appending the corresponding search query logic to the search criteria element using a logical AND operator. ### Claim 5 A computer program product comprising a non-transitory computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device, causes the computing device to: store a set of state altering date values in state morn-data associated with a cryptographic object in a data store, wherein the set of state altering date values comprises a plurality of state altering date values; retrieve the set of state altering date values from the data store; and determine a state of the cryptographic object based on a combination of the plurality of state altering date values, wherein the set of state altering date values comprises an initial date, an activation date, a deactivation date, a compromise date, and a destroy date, and wherein determining the state of the cryptographic object comprises: responsive to the destroy date being set and the compromise date not being set, determining that the cryptographic object is in a destroyed state; responsive to the destroy date not being set and the compromise date being set, determining that the cryptographic object is in a compromised state; responsive to the deactivation date being set and less than or equal to a current time, determining that the cryptographic object is in a deactivated state; responsive to the deactivation date not being set or greater than the current time and responsive to the activation date being set and less than or equal to the current time, determining that the cryptographic object is in an active state; responsive to the deactivation date not being set or greater than the current time and responsive to the activation date being set and greater than the current time, determining that the cryptographic object is in a pro-active state; and responsive to the deactivation date not being set or greater than the current time and responsive to the activation date not being set and the initial date being set, determining that the cryptographic object is in an active state. ### Claim 6 (depends on 5) The computer program product of claim 5, wherein determining the state of the cryptographic object further comprises: responsive to the deactivation date not being set or greater than the current time and responsive to the activation date not being set and the initial date not being set, determining that the cryptographic object is in an unknown state. ### Claim 7 (depends on 5) The computer program product of claim 5, wherein the computer readable program further causes the computing device to: generate a search filter to query for cryptographic objects using the set of state altering date values stored for each cryptographic object in the data store, wherein the search filter returns cryptographic objects that are in a given state or a combination of unique states. ### Claim 8 (depends on 7) The computer program product of claim 7, wherein generating the search filter to query for cryptographic objects comprises: for each search criteria element, locating corresponding search query condition logic and appending the corresponding search query logic to the search criteria element using a logical AND operator. ### Claim 9 (depends on 5) The computer program product of claim 5, wherein the computer readable program is stored in a non-transitory computer readable storage medium in a data processing system and wherein the computer readable program was downloaded over a network from a remote data processing system. ### Claim 10 (depends on 5) The computer program product of claim 5, wherein the computer readable program is stored in non-transitory a computer readable storage medium in a server data processing system and wherein the computer readable program is downloaded over a network to a remote data processing system for use in a computer readable storage medium with the remote system. ### Claim 11 An apparatus, comprising: a processor; and a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to: store a set of state altering date values in state meta-data associated with a cryptographic object in a data store, wherein the set of state altering date values comprises a plurality of state altering date vales; retrieve the set of state altering date values from the data store; and determining a state of the cryptographic object based on a combination of the plurality of state altering date values, wherein the set of state altering date value comprises an initial date, an activation date, a deactivation date, a compromise date, and a destroy date, and wherein determining the state of the cryptographic object comprises: responsive to the destroy date being set and the compromise date not being set, determining that the cryptographic object is in a destroyed state; responsive to the destroy date not being set and the compromised date being set, determining that the cryptographic object is in a compromised state; responsive to the deactivation date being set and less than or equal to a current time, determining that the cryptographic object is in a deactivated state; responsive to the deactivation date not being set or greater than the current time and responsive to the activation date being set and less than or equal to the current time, determining that the cryptographic object is in an active state; responsive to the deactivation date not being set or greater than the current time and responsive to the activation date being set and greater than the current time, determining that the cryptographic object is in a pre-active state; and responsive to the deactivation date not being set or greater than the current time and responsive to the activation date not being set and the initial date being set, determining that the cryptographic object is in an active state. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein determining the state of the cryptographic object further comprises; responsive to the deactivation date not being set or greater than the current time and responsive to the activation date not being set and the initial date not being set, determining that the cryptographic object is in an unknown state. ### Claim 13 (depends on 11) The apparatus of claim 11, wherein the instructions further cause the processor to; generate a search filter to query for cryptographic objects using the set of state altering date values stored for each cryptographic object in the data store, wherein the search filter returns cryptographic objects that are in a given state or a combination of unique states. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein generating the search filter to query for cryptographic objects comprises: for each search criteria element, locating corresponding search query condition logic and appending the corresponding search query logic to the search criteria element using a logical AND operator.