Method of transferring digital certificate,apparatus for transferring digital certificate, and system, program, and recording medium for transferring digital certificate

• US 7,584,351 B2
• Filed: 01/07/2005
• Issued: 09/01/2009
• Est. Priority Date: 01/09/2004
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Kakii, Hiroshi
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Schmidt; Karl L
• Application Number:
  US11/030,157
• Publication Number:
  US 20050204164A1
• Time in Patent Office: 1,698 Days
• Field of Search: 709/225, 713156-158, 713175-178, 713/169
• US Class Current: 713/157
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method of transferring digital certificates from a digital-certificate transferring apparatus to a communications counterpart. The method includes authenticating the communications counterpart using a common certificate and transferring a normal certificate to the communications counterpart when the authenticating succeeds. The method further includes receiving a first normal certificate at an address from said communications counterpart, and when, it is determined to be necessary, transferring to the communications counterpart a second normal certificate along with the information identifying the communications counterpart and an address corresponding to a second normal certificate. The second normal certificate is of a different type than the first normal certificate.

Claims

1. A method of transferring digital certificates, from a digital-certificate transferring apparatus, to a communications apparatus which is a communications counterpart of the digital-certificate transferring apparatus, comprising:

authenticating the communications counterpart using a common certificate being a digital certificate without apparatus-identifying information, and transferring a normal certificate being a digital certificate with information identifying said communications counterpart to the communications counterpart when the authenticating succeeds; and

receiving a first normal certificate, at an address of the digital-certificate transferring apparatus corresponding to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the digital-certificate transferring apparatus, transferring to the communications counterpart the second normal certificate along with the information identifying the communications counterpart and an address of the digital-certificate transferring apparatus corresponding to a second normal certificate for the communications counterpart to use when communicating with the digital-certificate transferring apparatus, said second normal certificate being a different type than said first normal certificate.

3. The method of transferring digital certificates as claimed in claim 1, further comprising:

determining whether to transfer said second normal certificate to said communications counterpart based on information being described in the received first normal certificate.

4. The method of transferring digital certificates as claimed in claim 1, further comprising:

determining whether to transfer said second normal certificate on said communications counterpart based on an address at which said first normal certificate is received.

5. The method of transferring digital certificate as claimed in claim 1, wherein a certification key for use in confirming the validity of said first normal certificate and a certification key for use in confirming the validity of said second normal certificate are different.

6. The method of transferring digital certificate as claimed in claim 1, further comprising:

when transferring said each one of said first normal certificate and said second normal certificate, requesting for setting the digital certificate in the communications counterpart.

2. A method of transferring digital certificates from a digital-certificate transferring apparatus to a communications apparatus which is a communications counterpart of the digital-certificate transferring apparatus, comprising:

using two types of digital certificates having different validity periods for authenticating the communications counterpart when communicating; and

authenticating the communications counterpart using a long-term certificate having a longer validity period of said two types of digital certificates, and transferring a normal certificate having a shorter validity period of said two types of digital certificates to the communications counterpart when the authenticating succeeds during the validity period of said long-term certificate; and

receiving a first normal certificate, at an address of the digital-certificate transferring apparatus which corresponds to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the digital-certificate transferring apparatus, transferring to the communications counterpart the second normal certificate along with an address of the digital-certificate transferring apparatus corresponding to the second normal certificate for the communications counterpart to use when communicating with the digital-certificate transferring apparatus, said second normal certificate having a validity period shorter relative to said long-term certificate, and being different from said first normal certificate.

7. An apparatus for transferring digital certificates to a communications apparatus which is a communications counterpart, comprising:

first transferring means for authenticating the communications counterpart using a common certificate being a digital certificate without apparatus-identifying information and transferring a normal certificate being a digital certificate with information identifying said communications counterpart to the communications counterpart when the authenticating succeeds; and

second transferring means for receiving a first normal certificate, at an address of the apparatus corresponding to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the apparatus, transferring to the communications counterpart along with the information identifying the communications counterpart and an address of the apparatus corresponding to the second normal certificate for the communications counterpart to use when communicating with the apparatus, said second normal certificate being a different type than said first normal certificate.

9. The apparatus for transferring digital certificates as claimed in claim 7, wherein said second transferring means determines whether to transfer said second normal certificate based on information described in the received first normal certificate.

10. The apparatus for transferring digital certificates as claimed in claim 7, wherein said second transferring means determines whether to transfer said second normal certificate based on an address at which said first normal certificate is received.

11. The apparatus for transferring digital certificate as claimed in claim 7, wherein a certification key for use in confirming the validity of said first normal certificate and a certification key for use in confirming the validity of said second normal certificate are different.

12. The apparatus for transferring digital certificate as claimed in claim 7, further comprising in each of said first certificate-transferring means and second certificate-transferring means:

means for, requesting when transferring each one of said first normal certificate and said second normal certificate, setting the digital certificate in the communications counterpart.

8. An apparatus for transferring digital certificates to a communications apparatus which is a communications counterpart, comprising:

means for using two types of digital certificates having different validity periods for authenticating the communications counterpart when communicating;

first transferring means for authenticating the communications counterpart using a long-term certificate having a longer validity period of said two types of digital certificates, and transferring a normal certificate having a shorter validity period of said two types of digital certificates to the communications counterpart when the authenticating succeeds during the validity period of said long-term certificate; and

second transferring means for receiving a first normal certificate, at an address of the apparatus which corresponds to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the apparatus, transferring to the communications counterpart the second normal certificate along with an address of the apparatus corresponding to the second normal certificate for the communications counterpart to use when communicating with the apparatus, said second normal certificate having a validity period shorter relative to said long-term certificate, and being different from said first normal certificate.

13. A system for transferring digital certificates, comprising:

a digital-certificate transferring apparatus for transferring a digital certificate to a communications apparatus; and

the communications apparatus to be a communications counterpart of the digital-certificate transferring apparatus,

the digital-certificate transferring apparatus further comprising;

first transferring means for authenticating the communications counterpart using a common certificate being a digital certificate without apparatus-identifying information and transferring a normal certificate being a digital certificate with information identifying said communications counterpart to the communications counterpart when the authenticating succeeds; and

second transferring means for receiving a first normal certificate, at an address of the apparatus corresponding to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the apparatus, transferring to the communications counterpart along with the information identifying the communications counterpart and an address of the apparatus corresponding to the second normal certificate for the communications counterpart to use when communicating with the apparatus, said second normal certificate being a different type than said first normal certificate; and

,

the communications apparatus further comprising;

means for receiving each one of said first normal certificate and said second normal certificate from said certificate-transferring means so as to store the received certificate.

14. A system for transferring digital certificates, comprising:

a digital-certificate transferring apparatus for transferring a digital certificate to a communications apparatus; and

the communications apparatus to be a communications counterpart of the digital-certificate transferring apparatus,

the digital-certificate transferring apparatus further comprising;

means for using two types of digital certificates having different validity periods for authenticating the communications counterpart when communicating;

first transferring means for authenticating the communications counterpart using a long-term certificate having a longer validity period of said two types of digital certificates, and transferring a normal certificate having a shorter validity period of said two types of digital certificates to the communications counterpart when the authenticating succeeds during the validity period of said long-term certificate; and

second transferring means for receiving a first normal certificate, at an address of the apparatus which corresponds to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the apparatus, transferring to the communications counterpart the second normal certificate along with an address of the apparatus corresponding to the second normal certificate for the communications counterpart to use when communicating with the apparatus, said second normal certificate having a validity period shorter relative to said long-term certificate, and being different from said first normal certificate; and

,

the communications apparatus further comprising;

means for receiving said each one of said first normal certificate and said second normal certificate from said certificate-transferring means so as to store said received certificate.

15. A computer readable storage medium encoded with computer executable instructions, which when executed by a computer, cause the computer to function as a digital-certificate transferring apparatus for transferring a digital certificate to a communications apparatus to be a communications counterpart, comprising:

first transferring means for authenticating the communications counterpart using a common certificate being a digital certificate without apparatus-identifying information and transferring a normal certificate being a digital certificate with information identifying said communications counterpart to the communications counterpart when the authenticating succeeds; and

second transferring means for receiving a first normal certificate, at an address of the apparatus corresponding to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the apparatus, transferring to the communications counterpart along with the information identifying the communications counterpart and an address of the apparatus corresponding to the second normal certificate for the communications counterpart to use when communicating with the apparatus, said second normal certificate being a different type than said first normal certificate.

16. A computer readable storage medium encoded with computer executable instructions, which when executed by a computer, cause the computer to function as a digital-certificate transferring apparatus for transferring a digital certificate to a communications apparatus to be a communications counterpart, comprising:

means for using two types of digital certificates having different validity periods for authenticating the communications counterpart when communicating;

first transferring means for authenticating the communications counterpart using a long-term certificate having a longer validity period of said two types of digital certificates, and transferring a normal certificate having a shorter validity period of said two types of digital certificates to the communications counterpart when the authenticating succeeds during the validity period of said long-term certificate; and

second transferring means for receiving a first normal certificate, at an address of the apparatus which corresponds to the first normal certificate, from said communications counterpart, and when, based on said received first normal certificate, it is determined to be necessary to transfer a second normal certificate to the communications counterpart for the communications counterpart to use when communicating with the apparatus, transferring to the communications counterpart the second normal certificate along with an address of the apparatus corresponding to the second normal certificate for the communications counterpart to use when communicating with the apparatus, said second normal certificate having a validity period shorter relative to said long-term certificate, and being different from said first normal certificate.