摘要 |
In an example, a DHN (DHN) is provided for enabling grantees to access digitally- controlled assets of a principal. The principal (level 0) establishes a digital testament (DT), identifying one or more grantees on levels 1 - n. Each grantee receives a digital heritage certificate (DHC), which may be based on the PKI certificate definition. The DHC includes a "PREDECESSORS" field, identifying one or more predecessor certificates that must be revoked before the DHC is valid. All grantee DHCs have the principal's level 0 DHC as a predecessor certificate. Level n certificates may also be valid only if all certificates at level n— 1 have been revoked. In practice, a DHC may be revoked when a user of the certificate passes away, so that nth generation grantees inherit only when generation n— 1 has passed away. |