Patent ID: 9722802
Date: 2017-08-01
CPC Classifications: H04L

Claim:
1. A method for increasing network security, wherein the method comprises: saving, by a network management system, a first list, wherein the first list is used to store certificate information being used by a network element, and the first list comprises a network element identity (ID), a network element device ID, an issuer of a certificate, and a serial number of the certificate; when determining that a certificate corresponding to the certificate information in the first list needs to be revoked, generating, by the network management system, a certificate revocation request file according to the certificate information, and deleting the certificate information in the first list from the first list, wherein the certificate revocation request file is used to request revocation of the certificate needing to be revoked; and sending, by the network management system, the certificate revocation request file to a public key infrastructure (PKI) system; and wherein that the network management system determines that the certificate corresponding to the certificate information in the first list needs to be revoked further includes: determining, by determining that a managed network element device is changed or the network element is discarded, that the certificate information in the first list needs to be revoked.