Patent ID: 8984283
Filing Date: 2015-03-17
Classification: H04L

Abstract:
1. A method for validating a revocation status of digital certificates, the method comprising: receiving, by a relying party, at least one digital certificate; determining, by the relying party, if the at least one digital certificate is to be validated against a private certificate revocation status database within the relying party's domain in addition to a public certificate revocation status database belonging to a different domain than the relying party's domain, revocation statuses maintained at the private certificate revocation status database being independent of revocation statuses maintained at the public certificate revocation status database; and responsive to determining by the relying party, that the at least one digital certificate is to be validated against the private certificate revocation status database in addition to the public certificate revocation status database: utilizing, by the relying party, a trust anchor signature to check the integrity of the listing of certificate revocation statuses in the private certificate revocation status database and to authenticate an issuer of the listing of certificate revocation statuses.