Patent ID: 7010683
Filing Date: 2006-03-07
Classification: H04L

Abstract:
1. A public key validation agent (PKVA) comprising: an off-line registration authority configured to generate a first public key serial number (PKVN) having a high probability of being different from all other PKVNs previously generated by the registration authority, to issue a first unsigned public key validation certificate (unsigned PKVN) off-line to a subject that binds a public key of the subject to the first PKVN, and to maintain a certificate database of unsigned PKVCs in which it stores the first unsigned PKVC; and an on-line credentials server configured to issue a disposable public key validation certificate (disposable PKVC) on-line to the subject, the disposable PKVC binds the public key of the subject from the first unsigned PKVC to the first PKVN from the first unsigned PKVC, wherein the credentials server is configured to maintain a table that contains entries corresponding to valid unsigned PKVCs stored in the certificate database.