Industrial Technology Research Institute

Huei-Ru Tseng

Pei-Chuan Tsai

Chih-Che Lin

Rong-Hong Jan

Chien Sheng Chen

Jing-Shyang Hwu

Chia-Chang Hsu

Hsia-Hsin Li

Ping-Ta Tsai

A security certificate management method for a vehicular network node is applied in a vehicular network. A message is received. Whether a certificate in the message is revoked is determined. If the certificate in the message is revoked, a regional certificate revocation list (RCRL) is generated or updated based on the revoked certificate by the vehicular network node, and the RCRL is transmitted into a communication range of the vehicular network node.

Security certificate management method for a vehicular network node and vehicular network node applying the same

Apparatuses and methods for certificate generation, certificate revocation and certificate verification are provided. The certificate generation and revocation apparatus includes: a key set computation unit receiving a secret value and a hash function set and generating a key set of an entity; a hash function unit generating the hash function set; a certificate generation unit generating certificates corresponding to the public/private key pairs and the key set; a certificate revocation unit acquiring derived secret key corresponding to a revoked certificate set and updating a certificate revocation list; and a certificate revocation list broadcast unit broadcasting the certificate revocation list; wherein the secret value corresponds to a root of a key tree, wherein the key set is generated by leaves of the key tree, wherein each node of the key tree is generated by a randomly selected hash function.

Apparatuses and methods for certificate generation, certificate revocation and certificate verification

A certificate management method and a certificate management device are disclosed. The certificate management device includes a key collection computing unit, a certificate revocation unit, and a certificate revocation list broadcast unit. The certificate management method includes determining to at least revoke a first certificate in certificates that are recorded in a key tree and related to an entity, and determining whether a first root node only covers the first certificate and other revoked certificate in the key tree. When the first root node only covers the first certificate and the other revoked certificate, information about the first root node is added to a certificate revocation list. The certificate revocation list is sent to another entity at least.

Method and device for managing certificates

Embodiments of the present invention are directed to methods and systems for generating and revoking, as well as validating, certificates used to protect communications within networks while maintaining privacy protection. In the context of a method, certificate generation and revocation with privacy preservation comprises determining a secret value to be used by a certificate authority and an entity; constructing a key tree based on the secret value, wherein the leaves of the key tree represent derived keys for the certificates for the entity; and generating certificates for the entity based in part on the key tree leaves. The method further comprises determining that one or more of the certificates should be revoked; determining a minimum key node set that covers the certificates to be revoked; adding the minimum key node set to a certificate revocation list; and providing the certificate revocation list to one or more entities. Corresponding apparatuses and computer program products are also provided.

Growing community of inventors

Taipei, Taiwan

Huei-Ru Tseng