Trust Information Delivery Scheme for Certificate Validation

摘要

A unique TIO based trust information delivery scheme is disclosed that allows clients to verify received certificates and to control Java and Javascript access efficiently. This scheme fits into the certificate verification process in SSL to provide a secure connection between a client and a Web server. In particular, the scheme is well suited for incorporation into consumer devices that have a limited footprint, such as set-top boxes, cell phones, and handheld computers. Furthermore, the TIO update scheme disclosed herein allows clients to update certificates securely and dynamically.

主权项

1. A method comprising:
receiving, from a computing device, an unverified root certificate, wherein the unverified root certificate is for certifying the computing device; hashing a public key portion of the unverified root certificate to generate a digest; determining that the digest matches one of a first plurality of previously stored hash values; receiving a second plurality of hash values; and overwriting the first plurality of previously stored hash values with the second plurality of hash values.