Patent ID: 8635449
Filing Date: 2014-01-21
Classification: H04L

Abstract:
1. A verification method by a validation server that is connected to a certificate authority, and verifies the validity of public key certificates issued from a certificate authority, the verification method comprising the steps of: when key information of the certificate authority has been updated, acquiring an authority certificate of the certificate authority including first information identifying the certificate authority and the updated key information; in association with the key information updated by the certificate authority, acquiring, from the certificate authority, revocation information indicating public key certificates issued by the certificate authority that are within a validity period but were revoked regardless of whether the key information of the certificate authority is updated or not; and in response to a validation request, the validation request including second information identifying the certificate authority, key information of the certificate authority at issuance of a public key certificate, and information identifying the public key certificate, creating a validation result indicating that the public key certificate corresponding to the information identifying the public key certificate included in the validation request is valid if the second information identifying the certificate authority included in the validation request corresponds to the first information identifying the certificate authority included in the authority certificate, and the information identifying the public key certificate included in the validation request does not exist in the revocation information.