Embedded extrinsic source for digital certificate validation

摘要

A computer uses the information included within a digital certificate to obtain a current date and time value from a trusted source extrinsic to the computer. The computer requests and receives the trusted current date and time value and compares the trusted current date and time value to a validity period included in the digital certificate, to determine if the digital certificate is expired. The information included within the digital certificate specifying an extrinsic source for the current date and time value can be included in an extension of the digital certificate, and the information can specify a plurality of extrinsic sources.

主权项

1. A method of validating a digital certificate, the method comprising:
a computer receiving a first digital certificate that includes within the first digital certificate, information specifying a first extrinsic source of a trusted current date and time value; the computer reading the information included within the first digital certificate specifying the first extrinsic source of the trusted current date and time value; the computer requesting the trusted current date and time value, based on the information specifying the first extrinsic source that is included within the first digital certificate; the computer receiving the trusted current date and time value; and the computer comparing the trusted current date and time value to a validity period of the first digital certificate.