Patent ID: 8316230
Filing Date: 2012-11-20
Classification: H04L

Abstract:
1. A revocation determination service for determining for a client whether a first digital certificate as issued by a first certificate authority (CA) has been revoked by the first CA and whether a second digital certificate as issued by a second CA has been revoked by the second CA, the service comprising: at least one processing unit; and at least one memory, communicatively coupled to the at least one processing unit and containing instructions that, when executed by the at least one processing unit, provide modules, comprising: an engine that receives a first query from the client, the received first query identifying the first digital certificate and identifying the first CA that issued the first digital certificate and a second query from the client, the received second query identifying the second digital certificate and identifying the second CA that issued the second digital certificate; a first provider and a second provider resident at the revocation determination service, wherein each of the first and the second provider corresponds to a separate revocation information repository, wherein each corresponding revocation information repository has revocation information for one or more CAs, and wherein the first provider corresponds to a first revocation information repository having revocation information for the first CA and not for the second CA and the second provider corresponds to a second revocation information repository having revocation information for the second CA and not for the first CA; and a configuration store comprising a configuration information record corresponding to each of the first and the second provider resident at the revocation determination service, wherein a first configuration information record corresponding to the first provider comprises: and wherein a second configuration information record corresponding to the second provider comprises: and wherein the engine: and wherein the first provider connects to the first revocation information repository having first revocation information for the first CA, wherein the first revocation information comprises logic for determining whether the first digital certificate has been revoked, and wherein the first provider determines whether the first digital certificate of the received query is revoked based on the first revocation information; and wherein the second provider connects to the second revocation information repository having second revocation information for the second CA, wherein the second revocation information comprises logic for determining whether the second digital certificate has been revoked, and wherein the second provider determines whether the second digital certificate of the received second query is revoked based on the second revocation information.