Revocation of public key infrastructure signatures

摘要

In one implementation, a public key infrastructure utilizes a two stage revocation process for a set of data. One stage authenticates or revokes the set of data based on the status of the digital signature and another stage authenticates or revokes the set of data based on the status of an individual signature by the digital certificate. For example, a digital certificate based is assigned a certificate number. A serial number is assigned for a signature for the set of data as signed by the digital certificate. A data transmission, data packet, or install package includes the set of data, the certificate number and the serial number. Therefore, individual instances of the signature may be revoked according to serial number.

主权项

1. A method comprising:
receiving a digital certificate derived from a cryptographic key, wherein the digital certificate includes a certificate number assigned to the digital certificate; generating a signature for a set of data using the digital certificate; assigning, by a processor, a signature serial number to the signature for the set of data; and generating, by the processor, a data packet including the certificate number and the signature serial number.