System and method for obtaining certificate status of subkeys
Systems and methods for updating status of digital certificate subkeys. A request is made to a key server to verify if a given key is revoked. If it is not, then the key with its subkeys is acquired from the key server. If one or more subkeys or signatures of the subkeys are different in the acquired key, then the key is replaced.
1. A method of updating a subkey in a web of trust security environment, comprising:
determining whether a main key that is used within the web of trust security environment is not revoked;
acquiring a current version of the main key from a key server if the main key is not revoked;
updating the main key on a message server if one or more signatures of one or more subkeys is different in the acquired current version of the main key from the main key stored on the message server;
wherein the one or more subkeys are associated with the main key on the message server for handling encryption of data within the web of trust security environment; and
issuing a notification if the acquired main key from the key server is updated.
2. The method of claim 1 , wherein the web of trust security environment does not include a centralized authority to store a current status of security-related keys; wherein key revocation information is not automatically distributed by the key server; and wherein the web of trust security environment allows users to determine whether a key is authentic depending on a combination of entities which signed a given key.
3. The method of claim 2 , wherein the main key and the one or more subkeys on the message server are used within a Pretty Good Privacy security environment; wherein the one or more subkeys are used for encryption and are digitally signed by any user within the web of trust security environment.
4. The method of claim 1 , wherein determination of whether to update the main key on the message server is performed according to a predetermined schedule.
5. The method of claim 1 , wherein determination of whether to update the main key on the message server is performed due to a user-initiated action.
6. The method of claim 1 , wherein the updating further comprises sending a newly acquired key to a remote device.
7. The method of claim 6 , wherein the remote device is a wireless mobile communication device.
8. The method of claim 7 , wherein the updating further comprises sending to the wireless mobile communication device only subkeys whose set of signatures has changed.
9. The method of claim 8 , wherein a user prompt on the wireless mobile communication device is provided when a conflict has arisen based upon an owner of the main key having revoked the main key; wherein the user prompt is provided for determining what course of action is to be taken with respect to the conflict.
10. The method of claim 8 , wherein when a conflict has arisen based upon the owner of the main key having revoked the main key, computer instructions automatically determine what course of action is to be taken with respect to the conflict.
11. A non-transitory computer-readable storage medium capable of causing one or more microprocessors on a message server to update a subkey in a web of trust security environment, wherein the medium comprises instructions that configure the one or more microprocessors to:
determine whether a main key that is used within the web of trust security environment is not revoked;
acquire a current version of the main key from a key server if the main key is not revoked;
update the main key on the message server if one or more signatures of one or more subkeys is different in the acquired current version of the main key from the main key stored on the message server;
wherein the one or more subkeys are associated with the main key on the message server for handling encryption of data within the web of trust security environment; and
issuing a notification if the acquired main key from the key server is updated.
12. A computing device programmed to update a subkey in a web of trust security environment, comprising:
a microprocessor configured to determine whether a main key that is used within the web of trust security environment is not revoked;
wherein the microprocessor is further configured to acquire a current version of the main key from a key server if the main key is not revoked;
wherein the microprocessor is further configured to update the main key on the computing device if one or more signatures of one or more subkeys is different in the acquired current version of the main key from the main key stored on the computing device;
wherein the one or more subkeys are associated with the main key on the computing device for handling encryption of data within the web of trust security environment; and
wherein the microprocessor is further configured to issue a notification if the acquired main key from the key server is updated.
13. The device of claim 12 , wherein the computing device is a message server.
14. The device of claim 12 , wherein the web of trust security environment does not include a centralized authority to store a current status of security-related keys; wherein key revocation information is not automatically distributed by the key server; and wherein the web of trust security environment allows users to determine whether a key is authentic depending on a combination of entities which signed a given key.
15. The device of claim 14 , wherein the main key and the one or more subkeys on the computing device are used within a Pretty Good Privacy security environment; wherein the one or more subkeys are used for encryption and are digitally signed by any user within the web of trust security environment.
16. The device of claim 12 , wherein determination of whether to update the main key on the computing device is performed by the microprocessor according to a predetermined schedule.
17. The device of claim 12 , wherein determination of whether to update the main key on the computing device is performed by the microprocessor due to a user-initiated action.
18. The device of claim 12 , wherein the microprocessor is further configured to send a newly acquired key to a remote device.
19. The device of claim 18 , wherein the remote device is a wireless mobile communication device.
20. The device of claim 19 , wherein the microprocessor is configured to send to the wireless mobile communication device only subkeys whose set of signatures has changed.
21. The device of claim 20 , wherein a user prompt on the wireless mobile communication device is provided when a conflict has arisen based upon an owner of the main key having revoked the main key; wherein the user prompt is provided for determining what course of action is to be taken with respect to the conflict.
22. The device of claim 20 , wherein when a conflict has arisen based upon the owner of the main key having revoked the main key computer instructions automatically determine what course of action is to be taken with respect to the conflict.