CRYPTOGRAPHIC METHODS AND SYSTEMS FOR MANAGING DIGITAL CERTIFICATES

Digital certificates are generated for devices by a Certificate Authority (CA), which communicates with devices via another entity-registration authority (RA)-so that the CA and RA cannot associate certificates with devices. Each certificate is associated with a public signature key, and with a publ...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Simplicio, JR., Marcos A, Kupwade Patil, Harsh, Ricardini Fernandez, Jefferson E, Silva, Marcos Vinicius M, Lopes Cominetti, Eduardo
Format: Patent
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:Digital certificates are generated for devices by a Certificate Authority (CA), which communicates with devices via another entity-registration authority (RA)-so that the CA and RA cannot associate certificates with devices. Each certificate is associated with a public signature key, and with a public encryption key used by CA to encrypt the certificate to hide it from the RA. Both keys are derived by CA from a single key. For example, the signature key can be derived from the public encryption key rather than generated independently. However, high security is obtained even when the CA does not sign the encrypted certificate. Reduced bandwidth and computational costs are obtained as a result. Other embodiments are also provided.