System and method for searching and retrieving certificates

• US 8,209,530 B2
• Filed: 12/22/2009
• Issued: 06/26/2012
• Est. Priority Date: 09/02/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., Brown, Michael S., Little, Herbert A.
• Primary Examiner(s): Gelagay, Shewaye
• Application Number:
  US12/645,003
• Publication Number:
  US 20100100730A1
• Time in Patent Office: 917 Days
• Field of Search: None
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

A system and method for searching and retrieving certificates, which may be used in the processing of encoded messages. In one broad aspect, a method is provided in which a certificate search request is received, a search of one or more certificate servers for certificates satisfying the request is performed, located certificates are retrieved and processed at a first computing device to determine data that uniquely identifies each located certificate, and search result data comprising the determined data is communicated to a second device (e.g. a mobile device) for use in determining whether each located certificate is already stored on the second device.

Claims

1. A method of searching and retrieving certificates performed by a first computing device, the method comprising:

receiving a certificate search request from an application executing on a second computing device, wherein the second computing device is a mobile device;

performing a search on one or more certificate servers by submitting at least one query to the one or more certificate servers to request retrieval of certificates based on the certificate search request;

retrieving at least one located certificate from the one or more certificate servers;

processing each retrieved certificate to determine search result data, wherein the search result data includes serial number and issuer data that uniquely identifies the retrieved certificate and is not the entire data within the certificate;

communicating, to the mobile device, the search result data associated with the retrieved certificates;

determining, by the application without user intervention, whether each retrieved certificate is already stored on the mobile device by comparing the serial number and issuer data that uniquely identifies the retrieved certificate in said search result data to serial number and issuer data associated with certificates stored on the mobile device so that the retrieved certificate is not required to be downloaded in its entirety to the mobile device to determine whether the retrieved certificate is stored on the mobile device;

in response to the determining, selecting certificates for downloading after identifying which retrieved certificates are already stored on the mobile device; and

downloading, to the mobile device, the retrieved certificates that are selected for download by the application without user intervention, for storage on the mobile device.

2. The method of claim 1, wherein the processing further comprises parsing each retrieved certificate to obtain the respective serial number and issuer data.

3. The method of claim 1, wherein the search result data further comprises a hash of at least a part of the retrieved certificate, and wherein the processing further comprises applying a hash algorithm to at least a part of each retrieved certificate to obtain the respective hash.

4. The method of claim 1, wherein the first computing device comprises a mobile data server.

5. The method of claim 1, further comprising caching each retrieved certificate after said processing.

6. The method of claim 1, further comprising temporarily storing each retrieved certificate until said communicating is performed, and then deleting each retrieved certificate after said communicating is performed.

7. A non-transitory computer-readable medium comprising a plurality of instructions, wherein when the instructions are executed by a processor, the processor performs a method of searching and retrieving certificates on a first computing device, the method comprising:

receiving a certificate search request from an application executing on a second computing device, wherein the second computing device is a mobile device;

performing a search on one or more certificate servers by submitting at least one query to the one or more certificate servers to request retrieval of certificates based on the certificate search request;

retrieving at least one located certificate from the one or more certificate servers;

processing each retrieved certificate to determine search result data, wherein the search result data includes serial number and issuer data that uniquely identifies the retrieved certificate and is not the entire data within the certificate;

for each retrieved certificate, communicating, to the mobile device, the search result data associated with the retrieved certificates;

determining, by the application without user intervention, whether each retrieved certificate is already stored on the mobile device by comparing the serial number and issuer data that uniquely identifies the retrieved certificate in said search result data to serial number and issuer data associated with certificates stored on the mobile device so that the retrieved certificate is not required to be downloaded in its entirety to the mobile device to determine whether the retrieved certificate is stored on the mobile device;

in response to the determining, selecting certificates for downloading after identifying which retrieved certificates are already stored on the mobile device; and

downloading, to the mobile device, the retrieved certificates that are selected for download by the application without user intervention, for storage on the mobile device.

8. The medium of claim 7, wherein the processing further comprises parsing each retrieved certificate to obtain the respective serial number and issuer data.

9. The medium of claim 7, wherein the search result data further comprises a hash of at least a part of the retrieved certificate, and wherein the processing further comprises applying a hash algorithm to at least a part of each retrieved certificate to obtain the respective hash.

10. The medium of claim 7, wherein the first computing device comprises a mobile data server.

11. The medium of claim 7, further comprising caching each retrieved certificate after said processing.

12. The medium of claim 7, further comprising temporarily storing each retrieved certificate until said communicating is performed, and then deleting each retrieved certificate after said communicating is performed.

13. A system for searching and retrieving certificates comprising at least a first computing device configured to:

receive a certificate search request from an application executing on a second computing device, wherein the second computing device is a mobile device;

perform a search on one or more certificate servers by submitting at least one query to the one or more certificate servers to request retrieval of certificates based on the certificate search request;

retrieve at least one located certificate from the one or more certificate servers;

process each retrieved certificate to determine search result data, wherein the search result data includes serial number and issuer data that uniquely identifies the retrieved certificate and is not the entire data within the certificate;

communicate, to the mobile device, the search result data associated with the retrieved certificates;

determine, by the application without user intervention, whether each retrieved certificate is already stored on the mobile device by comparing the serial number and issuer data that uniquely identifies the retrieved certificate in said search result data to serial number and issuer data associated with certificates stored on the mobile device so that the retrieved certificate is not required to be downloaded in its entirety to the mobile device to determine whether the retrieved certificate is stored on the mobile device;

in response to determining whether each retrieved certificate is already stored on the mobile device, select certificates for downloading after identifying which retrieved certificates are already stored on the mobile device; and

download, to the mobile device, retrieved certificates that are selected for download by the application without user intervention, for storage on the mobile device.

14. The system of claim 13, wherein in processing each retrieved certificate, the first computing device is further configured to parse each retrieved certificate to obtain the respective serial number and issuer data.

15. The system of claim 13, wherein the search result data further comprises a hash of at least a part of the retrieved certificate, and wherein in processing each retrieved certificate, the first computing device is further configured to apply a hash algorithm to at least a part of each retrieved certificate to obtain the respective hash.

16. The system of claim 13, wherein the first computing device comprises a mobile data server.

17. The system of claim 13, further comprising caching each retrieved certificate after said processing.

18. The system of claim 13, further comprising temporarily storing each retrieved certificate until said communicating is performed, and then deleting each retrieved certificate after said communicating is performed.

19. A system for searching and retrieving certificates comprising a first computing device, the first computing device comprising:

means for receiving a certificate search request from an application executing on a second computing device, wherein the second computing device is a mobile device;

means for performing a search on one or more certificate servers by submitting at least one query, to the one or more certificate servers to request retrieval of certificates based on the certificate search request;

means for retrieving at least one located certificate from the one or more certificate servers;

means for processing each retrieved certificate to determine search result data, wherein the search result data includes serial number and issuer data that uniquely identifies the retrieved certificate and is not the entire data within the certificate;

means for communicating, to the mobile device, the search result data associated with the retrieved certificates;

means for determining, by the application without user intervention, whether each retrieved certificate is already stored on the mobile device by comparing the serial number and issuer data that uniquely identifies the retrieved certificate in said search result data to serial number and issuer data associated with certificates stored on the mobile device so that the retrieved certificate is not required to be downloaded in its entirety to the mobile device to determine whether the retrieved certificate is stored on the mobile device;

means for selecting, in response to determining whether each retrieved certificate is already stored on the mobile device, certificates for downloading after identifying which retrieved certificates are already stored on the mobile device; and

means for downloading, to the mobile device, the retrieved certificates that are selected for download by the application without user intervention, for storage on the mobile device.