METHOD AND APPARATUS FOR MANAGING DEVICE REVOCATION LIST

摘要

A client revocation list management method and apparatus are provided to use a two-way protocol in the environment which is unable to verify client revocation, thereby safely controlling contents transmitted from a server to a client. A client receives a first client revocation list from a server(205). The client checks an electronic signature included in the first client revocation list(210). If the electronic signature is not right, the reception of the client revocation list is terminated(215). The client compares the version of the first client revocation list received from a server with the version of an existing client revocation list stored in the nonvolatile memory of the client(220). If the version of the first client revocation list received from the server is lower than that of the version of a second client revocation list stored in the nonvolatile memory, the reception of the client revocation list is terminated(225). The client records the first client revocation list in the nonvolatile memory of the client(230).