Combined digital certificate

摘要

A system can comprise a memory to store computer readable instructions and a processing unit to access the memory and to execute the computer readable instructions. The computer readable instructions can comprise a certificate manager configured to request generation of N number of random values, where N is an integer greater than or equal to one. The certificate manager can also be configured to request a digital certificate from at least one certificate authority of at least two different certificate authorities. The request can include a given one of the N number of random values. The certificate manager can also be configured to generate a private key of a public-private key pair, wherein the private key is generated based on a private key of each of the least two certificate authorities.

主权项

1. A system comprising:
a memory to store computer readable instructions; and a processing unit to access the memory and to execute the computer readable instructions; wherein the computer readable instructions comprise:
a certificate manager configured to:
request generation of N number of random values, where N is an integer greater than or equal to one;request a digital certificate from at least one certificate authority of at least two different certificate authorities each having equal authority, wherein the request includes a given one of the N number of random values;acquire at a later time a function of a private key of the at least one additional authority;generate a private key of a public-private key pair, wherein the private key is generated based on a function of one authority private key plus the later acquired function of a private key of the at least one additional authority and wherein the digital certificate generated by each of the at least two different certificate authorities for the certificate manager are generated independently of each other.wherein the private key for the computer is configured such that:SKey=(∑i=1N⁢⁢si+ri⁢ei)⁢⁢(mod⁢⁢n)orSKey=(∑i=1N⁢⁢(si+ri)⁢∏j≠i⁢⁢ej)⁢⁢(mod⁢⁢n) wherein:
SKey denotes the private key for the computer;ri denotes the given one of the N random values generated by the computer;ei denotes results of a hash function executed at a certificate authority i of the N number of certificate authorities;si denotes an integer provided from the certificate authority i; andn denotes a number of points on the elliptical curve.