System and method for obtaining certificate status of subkeys
View Patent ↗Systems and methods for updating status of digital certificate subkeys. A request is made to a key server to verify if a given key is revoked. If it is not, then the key with its subkeys is acquired from the key server. If one or more subkeys or signatures of the subkeys are different in the acquired key, then the key is replaced.
1. A method for verifying a key comprising subkeys for use in a web of trust security environment, the method being for operation on a message server and comprising:
determining at the message server whether the key comprising subkeys has been revoked;
if the key comprising subkeys has not been revoked, receiving a current version of the key comprising subkeys from a key server;
comparing the key comprising subkeys with the current version thereof received from the key server;
if the key comprising subkeys does not match the current version thereof received from the key server, then transmitting, to a mobile device coupled to the message server, at least one subkey of the current version of the key comprising subkeys received from the key server;
determining at the message server whether one or more signatures of the key comprising subkeys are different from corresponding one or more signatures of the current version of the key comprising subkeys received from the key server; and
issuing a notification to the mobile device if the one or more signatures of the key comprising subkeys are different from corresponding one or more signatures of the current version of the key comprising subkeys received from the key server.
2. The method of claim 1 , wherein determining at the message server whether the key comprising subkeys has been revoked comprises the message server making a request to the key server to verify a status of the key and receiving a reply from the key server.
3. The method of claim 1 , wherein the determining is in response to a request received from the mobile device.
4. The method of claim 1 , wherein the determining is according to a predefined schedule.
5. The method of claim 4 , wherein the predefined schedule is periodic.
6. The method of claim 1 , wherein the web of trust security environment is a Pretty Good Privacy (PGP) security environment.
7. The method of claim 1 , wherein the mobile device comprises a wireless mobile device.
8. The method of claim 1 , further comprising: in response to the determining, issuing a notification to the mobile device if the key comprising subkeys has been revoked.
9. The method of claim 1 , further comprising: if the key comprising subkeys has not been revoked, sending a request to the key server for the current version of the key comprising subkeys, wherein the current version of the key comprising subkeys is received from the key server in response to the request.
10. The method of claim 1 , further comprising: if the key comprising subkeys does match the current version thereof received from the key server, replacing the key comprising subkeys at the message server with the current version of the key comprising subkeys received from the key server.
11. The method of claim 1 , wherein the transmitting comprises transmitting, to the mobile device, all of the subkeys of the current version of the key comprising subkeys.
12. The method of claim 1 , further comprising: if the key comprising subkeys does match the current version thereof received from the key server, determining which one or more subkeys of the key comprising subkeys have changed, wherein the transmitting comprises transmitting, to the mobile device, the one or more subkeys that have changed.
13. A non-transitory computer-readable storage medium capable of causing one or more data processors in a message server to verify a key comprising subkeys for use in a web of trust security environment by implementing a method, the method comprising:
determining at the message server whether the key comprising subkeys has been revoked;
if the key comprising subkeys has not been revoked, receiving a current version of the key comprising subkeys from a key server;
comparing the key comprising subkeys with the current version thereof received from the key server;
if the key comprising subkeys does not match the current version thereof received from the key server, then transmitting, to the mobile device, at least one subkey of the current version of the key comprising subkeys received from the key server;
determining at the message server whether one or more signatures of the key comprising subkeys are different from corresponding one or more signatures of the current version of the key comprising subkeys received from the key server; and
issuing a notification to the mobile device if the one or more signatures of the key comprising subkeys are different from corresponding one or more signatures of the current version of the key comprising subkeys received from the key server.
14. The non-transitory computer-readable storage medium of claim 13 , wherein determining at the message server whether the key comprising subkeys has been revoked comprises the message server making a request to the key server to verify a status of the key and receiving a reply from the key server.
15. A system comprising:
a mobile device;
a key server; and
a message server configured to verify a key comprising subkeys for use in a web of trust security environment by implementing a method, the method comprising: determining at the message server whether the key comprising subkeys has been revoked; if the key comprising subkeys has not been revoked, receiving a current version of the key comprising subkeys from the key server;
comparing the key comprising subkeys with the current version thereof received from the key server; if the key comprising subkeys does not match the current version thereof received from the key server, then transmitting, to the mobile device, at least one subkey of the current version of the key comprising subkeys received from the key server; determining at the message server whether one or more signatures of the key comprising subkeys are different from corresponding one or more signatures of the current version of the key comprising subkeys received from the key server; and issuing a notification to the mobile device if the one or more signatures of the key comprising subkeys are different from corresponding one or more signatures of the current version of the key comprising subkeys received from the key server.
16. The system of claim 15 , wherein the web trust security environment is a Pretty Good Privacy (PGP) security environment.
17. The system of claim 15 , wherein the mobile device comprises a wireless mobile device.
18. The system of claim 15 , wherein the message server is an email server that handles messages for the mobile device.