Digital certificates

• US 20090037738A1
• Filed: 12/27/2007
• Published: 02/05/2009
• Est. Priority Date: 06/23/2003
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: NDS Limited (Cisco Systems, Inc.)
• Inventors: Halperin, Victor, Kipnis, Aviad, Belenky, Yaacov, Shen-Orr, Chaim D.
• Granted Patent: US 7,904,721 B2
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3093 involving Lattices or polynomial equations, e.g. NTRU scheme
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method for producing a certificate, the certificate including data, the method including choosing a seed s, the seed s including a result of applying a function H to the data, generating a key pair (E,D), such that E=F(s,t), F being a publicly known function, and including s and t in the certificate. Related methods, and certificates produced by the various methods, are also described.

Claims

1. A method for producing a compressed form public key delivery certificate, the compressed form public key delivery certificate comprising data, the method comprising:

choosing a seed s, the seed s comprising a result of applying a function H to the data;

generating a key pair (E,D), such that E=F(s,t), D being a private key, E being a public key, F being a publicly known function; and

producing the compressed form public key delivery certificate including the public key E in compressed form, by including the s and the t in the certificate instead of the public key E,

wherein the s and the t together are shorter than the E and,

wherein the public key E is generable from the s and the t.

2. The method according to claim 1 and wherein the including the s and the t in the certificate comprises:

including the s concatenated with the t in the certificate.

3. The method according to claim 1 and wherein the function H comprises a hash function.

4. The method according to claim 1 and wherein the function H comprises a checksum function.

5. The method according to claim 1 and wherein the function H comprises adding redundancy to the data.

6. A compressed form public key delivery certificate produced by a method comprising:

choosing a seed s, the seed s comprising a result of applying a function H to the data;

generating a key pair (E,D), such that E=F(s,t), D being a private key, E being a public key, F being a publicly known function; and

producing the compressed form public key delivery certificate including the public key E in compressed form, by including the s and the t in the certificate instead of the public key E,

wherein the s and the t together are shorter than the E and,

wherein the public key E is generable from the s and the t.

7-18. -18. (canceled)

19. A compressed form public key delivery certificate for a public key E associated with a private key D, the public key E and the private key D forming a key pair, the certificate comprising:

data;

a seed s, s being a result of applying a function H to the data; and

a t, wherein,

the s and the t are included in the certificate instead of the public key E, the public key E being generable from the s and the t in that E=F(s,t) wherein F is a publicly known function, the s and the t together being shorter than the public key E so that the public key E is included in the certificate in compressed form.