Patent ID: 6128740
Filing Date: 2000-10-03
Classification: G06Q,H04L

Abstract:
A computer network security system comprising:means for on demand publishing of data identifying revoked certificates in response to receipt of revocation request data including means, responsive to the revocation request data, for determining whether to publish the data identifying revoked certificates on demand and for generating an updated certificate revocation list for on demand publishing to at least one network node if on demand publishing is specified wherein the means for determining whether to publish the data generates on demand update request data and receives response data representing whether on demand publishing of the data is specified and wherein the means for on demand publishing determines whether to publish on demand in response to data representing a reason for certificate revocation; andmeans for storing the on demand published data for use to determine whether a certificate is valid including certificate revocation list memory having a segmented certificate revocation list with associated distribution pointers.