Motorola Solutions, Inc.

Liang Guo

Anthony R Metke

Whay Chiou Lee

Deepak Bansal

Donald Eggleston Eastlake, Iii

Qi Bao

Donald E Eastlake

A method and device are useful for enabling a trust relationship using an unexpired public key infrastructure (PKI) certificate, where a current status of the PKI certificate is unavailable. The method includes determining at a relying party that a certificate status update for the PKI certificate is unavailable (step). Next, in response to the certificate status update being unavailable, a tolerable certificate status age (TCSA) for the PKI certificate is determined at the relying party based on one or more attributes associated with a certificate holder of the PKI certificate (step). Using the PKI certificate, a trust relationship is enabled between the relying party and the certificate holder after determining the TCSA and before an expiration of the TCSA (step).

Method and device for enabling a trust relationship using an unexpired public key infrastructure (PKI) certificate

A method for deploying a trust bridge in an ad hoc wireless network can provide interoperability for multi-organizational authentication. The method includes processing at a delegate certification authority (DCA) node device authorizations received from of a plurality of certification authorities (CAs) of different organizations, where the authorizations authorize the DCA node device to serve as a DCA representing the CAs (step). The DCA node device then processes context information received from the ad hoc wireless network (step). Next, the DCA node device determines, based on the context information, that a second node device should be enabled as a new trust bridge (step). The DCA node device then performs a trust bridge deployment to enable the second node device to serve as the new trust bridge (step).

Method and device for dynamic deployment of trust bridges in an ad hoc wireless network

A method and device are useful for enabling a trust relationship using an expired public key infrastructure (PKI) certificate. The method includes determining at a relying party a maximum permissible grace period during which the PKI certificate can be conditionally granted a valid status (step). Next, at the relying party an uncertainty interval is determined, during which the relying party is unable to detect a revocation of the PKI certificate (step). A certificate grace period is then determined at the relying party from a function of the maximum permissible grace period, the uncertainty interval and at least one attribute defined in the PKI certificate (step). Using the PKI certificate, a trust relationship is then enabled between the relying party and a certificate holder of the PKI certificate, after determining the grace period and before an expiration of the grace period (step).

Method and device for enabling a trust relationship using an expired public key infrastructure (PKI) certificate

A system for facilitating bandwidth management in a routing domain is presented. In the system, area bandwidth managers are coupled to a domain bandwidth manager and arranged in accordance with an Open Shortest Path First (OSPF) hierarchical routing topology with the domain bandwidth manager at an upper level of the topology. Each area bandwidth manager is located in a different area of the routing topology in at least one lower level of the topology. The domain bandwidth manager and the area bandwidth managers cooperatively coordinate admission control to a routing domain for facilitating a communication session between a source device and a destination device.

Growing community of inventors

Brighton, MA, United States of America

Liang Guo