Patent ID: 8819417
Filing Date: 2014-08-26
Classification: H04L

Abstract:
1. A validation server connecting to a HSM (Hardware Security Module) that conducts a reception of a request for a certificate validation, building a certification path, and validation of the certification path, comprising: a memory unit storing software cryptographic modules, and a controller, when conducting signature validation processing for a certificate, a certificate revocation list, or an OCSP (Online Certificate Status Protocol) response in the process of the certification path validation, performing functions to: calculate a hash value of the certificate, the certificate revocation list, or the OCSP response by using the software cryptographic module, decrypt a signature value of the certificate, the certificate revocation list, or the OCSP response which are to be validated by using the software cryptographic module, conduct the signature validation processing by comparing the calculated hash value and the decrypted data by using the software cryptographic module, calculate a hash value of a result of the signature validation processing by using the software cryptographic module, and encrypt the hash value of the result of the signature validation processing by using the HSM and a secret key of the HSM, and thereby generating a signature value.