Hierarchical Root Certificate Revocation in Validation Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely revoking a root certificate stored in a device, as it is difficult to transmit and validate a new root certificate from a remote location without compromising security, especially when secret keys are compromised.
Innovation Solution
A device and method that store multiple root certificates with ranks, allowing revocation information to be validated using a higher-ranked root certificate, blocking the use of revoked certificates and ensuring secure storage and validation of revocation indications, even in one-time programmable memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a root certificate is stored in a device for validating digital signatures, then data validation security is improved, but the ability to revoke the certificate securely is worsened
Solution Approach 1:
The system segments the root certificate validation function by storing multiple root certificates with different ranks in the device. Each root certificate can be independently revoked based on its rank, allowing secure revocation without compromising the entire certificate chain. This segmentation enables selective revocation while maintaining validation capability through higher-ranked certificates.
Solution Approach 2:
The system performs preliminary action by pre-storing multiple root certificates with hierarchical ranks before any revocation occurs. This advance preparation allows the system to immediately switch to alternative certificates when revocation is needed, eliminating the need for complex real-time certificate generation or transmission during the revocation event.
2Adaptability or versatility
If revocation information is transmitted from a remote location, then certificate revocation capability is improved, but security is worsened when secret keys are compromised
Solution Approach 1:
The system uses higher-ranked root certificates as intermediaries to validate revocation information. When a lower-ranked certificate needs revocation, the system obtains revocation information signed by a higher-ranked certificate and validates it using the higher-ranked certificate's public key. This intermediary validation mechanism ensures that even if a compromised certificate's secret key is used, it cannot forge valid revocation information.
Solution Approach 2:
The system applies preliminary anti-action by establishing a hierarchical rank structure where higher-ranked certificates serve as trusted anchors before any compromise occurs. This pre-established hierarchy prevents compromised lower-ranked certificates from generating fraudulent revocation information, as the validation process requires signatures from higher-ranked (uncompromised) certificates.
3Reliability
If multiple root certificates are stored with ranks, then secure revocation is improved, but device storage requirements are worsened
Solution Approach 1:
The system implements dynamics by maintaining a hierarchical rank structure among multiple root certificates, where certificates can be activated or deactivated based on their rank and revocation status. This dynamic management allows the system to utilize multiple certificates for enhanced security while managing storage resources efficiently through selective activation rather than requiring all certificates to be simultaneously active.
Data Source
AI summary
The invention relates to a device for validating data using a root certificate, wherein a plurality of root certificates is stored in the device, each root certificate having a rank. The device is configured to receive revocation information indicating at least one revoked root certificate, to validate the revocation information using one of the root certificates stored in the device and to block the use of the revoked root certificate if the revocation information is successfully validated using a root certificate having a higher rank than the revoked root certificate. Moreover, the invention relates to a method for revoking a root certificate stored in a device.