Embedded extrinsic source for digital certificate validation

摘要

A computer uses the information included within a digital certificate to obtain a current date and time value from a trusted extrinsic trusted source and the computer compares the obtained current date and time value to a validity period included in the digital certificate to determine if the digital certificate is expired. The information included within the digital certificate specifying an extrinsic source for the current date and time value can be included in an extension of the digital certificate, and the information can specify a plurality of extrinsic sources.

主权项

1. A method of validating a first digital certificate, the method comprising the steps of:
a computer receiving the first digital certificate including information defining a validity period and information specifying a first extrinsic source; the computer determining that the first digital certificate includes an indicator value of criticality asserting that the computer is required to receive a current date and time value from one of a plurality of extrinsic sources; the computer reading the first digital certificate to identify an address of the first extrinsic source; the computer requesting the current date and time value from the first extrinsic source;the computer receiving the current date and time value;
the computer comparing the current date and time value to the validity period of the first digital certificate; and the computer determining if the current date and time value is within the validity period.