METHOD AND DEVICE FOR MANAGING CERTIFICATES

摘要

A certificate management method and a certificate management device are disclosed. The certificate management device includes a key collection computing unit, a certificate revocation unit, and a certificate revocation list broadcast unit. The certificate management method includes determining to at least revoke a first certificate in certificates that are recorded in a key tree and related to an entity, and determining whether a first root node only covers the first certificate and other revoked certificate in the key tree. When the first root node only covers the first certificate and the other revoked certificate, information about the first root node is added to a certificate revocation list. The certificate revocation list is sent to another entity at least.

主权项

1. A certificate management method, comprising:
determining to at least revoke a first certificate in certificates that are recorded in a key tree and related to an entity; determining whether a first root node only covers the first certificate and other revoked certificate in the key tree; when the first root node only covers the first certificate and the other revoked certificate, adding information about the first root node to a certificate revocation list; and transmitting the certificate revocation list to another entity at least.