Hitachi, Ltd.

Akane Sato

Takahiro Fujishiro

Yoko Hashimoto

Shingo Hane

Masahiko Furuya

Masami Uzawa

Masami Ogawa

A validation server using HSM, which reduces required process time from receiving a validation request to responding with a validation result, and comprises a first software cryptographic moduleand a second software cryptographic moduleon a validation serverwhose HSM is coupled with an I/F part. According to the validation server, load states of HSM, the first software cryptographic moduleand the second software cryptographic moduleare monitored by a cryptographic module monitor unit, and when cryptographic calculations in a validation process of certificates are conducted, the cryptographic calculations are executed by using the least loaded cryptographic module selected at a cryptographic module selector unit

Validation server, validation method, and program

In response to a validation request that includes second information identifying the certificate authority, key information of the certificate authority at issuance of the public key certificate, and information identifying the public key certificate, if the second information identifying the certificate authority included in the validation request corresponds to the first information identifying the certificate authority included in the authority certificate, and the information identifying the public key certificate included in the validation request does not exist in the revocation information, the validation server creates a validation result indicating that the public key certificate corresponding to the information identifying the public key certificate included in the validation request is valid.

Method of validation public key certificate and validation server

A certificate validation method for causing a certificate validation server to receive a certificate validation request from a given terminal device, build a certification path of from a first certificate authority (CA) to a second CA, perform validation of the certification path, and send a validation result to the terminal which issued the certificate validation request is disclosed. The validation server detects either a key update of any given CA or a compromise of the given CA, acquires a certificate of relevant CA and first certificate status information and second certificate status information, stores the acquired information in a storage unit or, alternatively, updates the information stored in the storage based on the acquired information, and performs the building of a certification path and validation of the certification path by use of the information of the storage unit.

Growing community of inventors

Yokohama, Japan

Akane Sato