Patent ID: 7512785
Filing Date: 2009-03-31
Classification: H04L

Abstract:
1. A method comprising: registering a first party and a second party with a database at a server, wherein the first party is registered as a party relying on a digital certificate of the second party; receiving a request to revoke the digital certificate of the second party after registering the first party; authenticating the request in accordance with a pre-defined authenticating policy associated with the digital certificate of the second party, and generating an authorization certificate by a revoker of digital certificates, wherein the authentication certificate is associated with the request to ensure the request is authenticated in accordance with the pre-defined authentication policy, the authentication of the request including verifying a digital signature incorporated in the request with a list of the digital certificates previously defined as revoker certificates for a website; sending the authorization certificate to the first party, wherein the first party to receive the authorization certificate; revoking the digital certificate of the second party in accordance with a revocation policy; and initiating communication with the first party to indicate that the digital certificate has been revoked, wherein the communication includes notifying the first party that the digital certificate of the second party has been revoked, wherein the notification is further sent to other parties registering with the database as relying on the digital certificate of the second party.