Revocation status using other credentials
View Patent ↗Providing revocation status of at least one associated credential includes providing a primary credential that is at least initially independent of the associated credential, binding the at least one associated credential to the primary credential, and deeming the at least one associated credential to be revoked if the primary credential is revoked. Providing revocation status of at least one associated credential may also include deeming the at least one associated credential to be not revoked if the primary credential is not revoked. Binding may be independent of the contents of the credentials and may be independent of whether any of the credentials authenticate any other ones of the credentials. The at least one associated credential may be provided on an integrated circuit card (ICC). The ICC may be part of a mobile phone or a smart card.
1. A method of providing revocation status of at least one associated credential, comprising:
providing information about a primary credential that is cryptographically independent of the associated credential;
binding the at least one associated credential to the primary credential; and
deeming the at least one associated credential to be revoked if the primary credential is revoked, wherein the associated credential uses a non-revocable authentication mechanism.
2. A method, according to claim 1 , further comprising:
deeming the at least one associated credential to be not revoked if the primary credential is not revoked.
3. A method, according to claim 1 , wherein binding the at least one associated credential to the primary credential is independent of the contents of the credentials and is independent of whether any of the credentials authenticate any other ones of the credentials.
4. A method, according to claim 1 , wherein the at least one associated credential is provided on a first integrated circuit card (ICC).
5. A method, according to claim 4 , wherein the first ICC is part of one of: a mobile phone and a smart card.
6. A method, according to claim 4 , wherein the primary credential is provided on a host that communicates with the first ICC.
7. A method, according to claim 4 , wherein a host communicates with the first ICC and the primary credential is provided external to the host and external to the first ICC.
8. A method, according to claim 7 , wherein the primary credential is provided on a second ICC separate from the first ICC.
9. A method, according to claim 1 , wherein a single primary credential is bound to a plurality of associated credentials so that revocation status of all of the associated credentials varies according to revocation status of the primary credential.
10. A method, according to claim 1 , wherein the at least one associated credential is implemented using Elliptic Curve Cryptography (ECC).
11. Computer software, provided in a non-transitory computer-readable medium, that provides revocation status of at least one associated credential, the software comprising:
executable code that accesses information about a primary credential that is cryptographically independent of the associated credential;
executable code that binds the at least one associated credential to the primary credential; and
executable code that deems the at least one associated credential to be revoked if the primary credential is revoked, wherein the associated credential uses a non-revocable authentication mechanism.
12. Computer software, according to claim 11 , further comprising:
executable code that deems the at least one associated credential to be not revoked if the primary credential is not revoked.
13. Computer software, according to claim 11 , wherein binding the at least one associated credential to the primary credential is independent of the contents of the credentials and is independent of whether any of the credentials authenticate any other ones of the credentials.
14. Computer software, according to claim 11 , wherein the at least one associated credential is provided on a first integrated circuit card (ICC).
15. Computer software, according to claim 14 , wherein the first ICC is part of one of: a mobile phone and a smart card.
16. Computer software, according to claim 14 , wherein the primary credential is provided on a host that communicates with the first ICC.
17. Computer software, according to claim 14 , wherein a host communicates with the first ICC and the primary credential is provided external to the host and external to the first ICC.
18. Computer software, according to claim 17 , wherein the primary credential is provided on a second ICC separate from the first ICC.
19. Computer software, according to claim 11 , wherein a single primary credential is bound to a plurality of associated credentials so that revocation status of all of the associated credentials varies according to revocation status of the primary credential.
20. Computer software, according to claim 11 , wherein the at least one associated credential is implemented using Elliptic Curve Cryptography (ECC).