Patent ID: 6513116
Filing Date: 2003-01-28
Classification: H04L

Abstract:
A method, including steps of:maintaining a base root certificate in storage at a client; and using said base root certificate to obtain a security information message, said security information message including a plurality of root certificates from a server wherein said plurality of root certificates forms a chain within said security information message, said security information message being obtained before verification of any of said root certificates, said chain linking each root certificate with a next root certificate, each root certificate being usable to verify a next root certificate, at least one root certificate being verifiable using said base root certificate, at least one root certificate being current, each root certificate including an expiration date, and each root certificate being digitally signed using a private key for a first key pair and including a public key for the first key pair and a secure digest of a public key for a second key pair for verifying the public key for the second key pair.