Method and apparatus for distributing root certification

• US 7,877,600 B2
• Filed: 12/27/2006
• Issued: 01/25/2011
• Est. Priority Date: 12/27/2006
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Qiu, Xin, Sprunk, Eric J., Peterka, Petr
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Durham; Imhotep
• Application Number:
  US11/616,348
• Publication Number:
  US 20080162928A1
• Time in Patent Office: 1,490 Days
• Field of Search: 713/157, 713/156, 713/158, 726/10, 726/6
• US Class Current: 713/157
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

An apparatus and method for providing at least one root certificate are disclosed. Specifically, a plurality of root certificates is received and stored. Afterwards, a request is received from a first endpoint device for a desired root certificate, where the desired root certificate is used by the first endpoint device to verify an identity of a second endpoint device. Furthermore, the first endpoint device and the second endpoint device are associated with different certificate hierarchies. The desired root certificate is then sent to at least the first endpoint device.

Claims

1. A method for providing at least one root certificate, comprising the steps of:

storing a plurality of root certificates generated by a plurality of root certificate authorities, where at least two of said plurality of root certificate authorities are associated with different certificate hierarchies;

receiving a request from a first endpoint device for a desired root certificate of a second endpoint device, wherein said desired root certificate is used by said first endpoint device to verify an identity of the second endpoint device, and wherein said first endpoint device and said second endpoint device are associated with different certificate authorities and different certificate hierarchies; and

providing said desired root certificate to at least said first endpoint device, wherein said first endpoint device directly communicates with said second endpoint device after using said desired root certificate to validate said second endpoint device.

2. The method of claim 1, wherein said plurality of root certificates is stored by a plurality of network headends.

3. The method of claim 2, wherein at least one of said plurality of network headends comprises a server.

4. The method of claim 2, wherein both said first endpoint device and said second endpoint device are located in a same network as one of said plurality of network headends.

5. The method of claim 2, wherein said first endpoint device and said second endpoint device are located in different networks, where each of said different networks is served by one of said plurality of network headends.

6. The method of claim 1, wherein said plurality of root certificates is received from a central trust controller (CTC).

7. A system for providing at least one root certificate, comprising:

at least one network headend for receiving and storing a plurality of root certificates generated by a plurality of root certificate authorities, where at least two of said plurality of root certificate authorities are associated with different certificate hierarchies; and

a first endpoint device that submits a request to said at least one network headend for a desired root certificate of a second endpoint device, wherein said desired root certificate is used by said first endpoint device to verify an identity of the second endpoint device, and wherein said first endpoint device and said second endpoint device are associated with different certificate authorities and different certificate hierarchies,

wherein the at least one network headend provides said desired root certificate to the first endpoint device, wherein said first endpoint device directly communicates with said second endpoint device after using said desired root certificate to validate said second endpoint device.

8. The system of claim 7, wherein said at least one network headend provides said desired root certificate to at least said first endpoint device.

9. The system of claim 7, wherein said at least one network headend comprises a server.

10. The system of claim 7, wherein both said first endpoint device and said second endpoint device are located in a same network as said at least one network headend.

11. The system of claim 7, wherein said first endpoint device and said second endpoint device are located in different networks, where each of said different networks is served by one of said plurality of network headends.