ROUTE CERTIFICATE UPDATE SYSTEM, METHOD AND PROGRAM, AND SERVER AND CLIENT DEVICE

摘要

PROBLEM TO BE SOLVED: To provide a route certificate update system in which a client can authenticate the public key of a server surely even during update period of the route certificate. SOLUTION: When the validity time of an old route certificate Ca does not expire yet, a server 110 selects a first certificate chain consisting of a series of certificates including a link certificate L, a new route certificate Ca1 and a server certificate S1 and being certificated in chain reaction by the old route certificate Ca and transmits the first certificate chain to a client device 120. When the validity time of the old route certificate Ca expired, a second certificate chain consisting of a series of certificates being certificated in chain reaction by the new route certificate Ca1 is selected and transmitted to the client device 120. The client device 120 sequentially verifies certificates included in the certificate chain transmitted from the server 110 based on a public key included in the route certificate. COPYRIGHT: (C)2005,JPO&NCIPI