Systems, methods and apparatuses for securing root certificates

摘要

The systems, methods and apparatuses described herein provide a computing environment that manages root certificates. An apparatus according to the present disclosure may comprise a non-volatile storage storing a plurality of root certificates and a supervisor. The supervisor may be configured to receive a message identifying one of the plurality of root certificates stored in the non-volatile storage to be revoked, verify the message being signed by at least two private keys corresponding to two root certificates stored in the non-volatile storage and revoke the root certificate identified in the message.

主权项

1. An apparatus, comprising:
a non-volatile storage storing a plurality of root certificates, wherein at least one root certificate of the plurality of root certificates having an attribute of being active and at least another root certificate of the plurality of root certificates having an attribute of being dormant; a programmed logic circuit coupled to the non-volatile storage and configured to:
receive a message identifying one of the plurality of root certificates stored in the non-volatile storage to be revoked;verify the message being signed by at least two private keys corresponding to two root certificates stored in the non-volatile storage and that at least one of the at least two private keys used to sign the message corresponds to root certificates stored in the non-volatile storage having an attribute of being dormant; andrevoke the root certificate identified in the message.