Patent ID: 9621356
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. A method for revoking a root certificate from at least one client device, wherein a public key provided in the root certificate is associated with a first private key, the method comprising: distributing an administrative certificate to the at least one client device, wherein the administrative certificate includes a certificate signature created using the first private key; receiving a request to revoke the root certificate, wherein the request includes an object identifier (OID) that is associated with the root certificate; determining that the at least one client device is configured to trust the root certificate; generating a message to revoke the root certificate from the at least one client device, wherein the message includes the OID and is formatted in a pre-defined manner known to the at least one client device; requesting that a certificate authority (CA) associated with the root certificate sign the message with a first signature using a second private key; signing the message with a second signature using a third private key, wherein the third private key is associated with a public key in the administrative certificate; and issuing the message to the at least one client device, wherein: