IP Library Granted Patent US 11,552,806
Granted Patent B2
US 11,552,806 · App. 16/537,380 · Granted Jan 10, 2023

Systems and methods for enhanced public key infrastructure

Inventor: Massimiliano Pala (Denver, CO)
Assignee: Cable Television Laboratories, Inc.
H04L9/3268H04L9/14H04L9/3247
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,552,806
App. No.
16/537,380
Granted
Jan 10, 2023
Kind
B2
Abstract

A system for enhanced public key infrastructure is provided. The system includes a computer device. The computer device is programmed to receive a digital certificate including a composite signature field including a plurality of signatures. The plurality of signatures include at least a first signature and a second signature. The computer device is also programmed to retrieve, from the digital certificate, a first key associated with the first signature from the digital certificate. The computer device is further programmed to retrieve the first signature from the composite signature field. In addition, the at least one computer device is programmed to validate the first signature using the first key.

Claims (30)

1. A system for enhanced public key infrastructure comprising a computer device comprising at least one processor in communication with at least one memory device, and wherein the at least one memory device stores a plurality of instructions, wherein the at least one processor is programmed to:

receive a digital certificate including a composite signature field including a plurality of signatures, wherein the plurality of signatures include at least a first signature and a second signature, and wherein the first signature and the second signature are provided by a first certificate authority, wherein the first certificate authority generates the first signature using a first cryptographic algorithm and the second signature using a second cryptographic algorithm, wherein the first cryptographic algorithm is associated with a first key and wherein the second cryptographic algorithm is associated with a second key, and wherein the first cryptographic algorithm is different from the second cryptographic algorithm;

retrieve, from the digital certificate, the first key associated with the first signature from the digital certificate;

retrieve the first signature from the composite signature field;

validate the first signature using the first key;

retrieve, from the digital certificate, the second key associated with the second signature;

retrieve the second signature from the composite signature field; and

validate the second signature using the second key.

2. The system in accordance with claim 1 , wherein the at least one processor is further programmed to:

retrieve, from the digital certificate, a third key associated with a third signature of the plurality of signatures, wherein the third key and the third signature are associated with the first certificate authority;

retrieve the third signature from the composite signature field; and

validate the third signature using the third key.

3. The system in accordance with claim 1 , wherein the at least one processor is further programmed to determine the first cryptographic algorithm associated with the first key.

4. The system in accordance with claim 3 , wherein the at least one processor is further programmed to determine if the first cryptographic algorithm is valid.

5. The system in accordance with claim 4 , wherein the at least one processor is further programmed to determine if the first cryptographic algorithm is valid based on at least one of an Online Certificate Status Protocol (OCSP) and a Certificate Revocation List (CRL).

6. The system in accordance with claim 3 , wherein the at least one processor is further programmed to determine if the computer device is capable of processing the first cryptographic algorithm associated with the first signature.

7. The system in accordance with claim 3 , wherein the at least one processor is further programmed to determine the second cryptographic algorithm associated with the second signature.

8. A computing device for enhanced public key infrastructure comprising at least one processor in communication with at least one memory device, and wherein the at least one memory device stores a plurality of instructions, wherein the at least one processor is programmed to:

generate a first signature associated with a first key and a first cryptographic algorithm;

generate a second signature associated with a second key and a second cryptographic algorithm, wherein the first signature and the second signature are provided by a first certificate authority, wherein the first certificate authority generates the first signature using a first cryptographic algorithm and the second signature using a second cryptographic algorithm, wherein the first cryptographic algorithm is associated with the first key and wherein the second cryptographic algorithm is associated with the second key, and wherein the first cryptographic algorithm is different from the second cryptographic algorithm;

combine the first signature and the second signature into a composite signature; and

generate a digital certificate including the composite signature in a single field.

9. The computing device in accordance with claim 8 , wherein the digital certificate includes a plurality of fields, and wherein the at least one processor is further programmed to:

store the first key in a first field of the plurality of fields and a first identifier for the first cryptographic algorithm in a second field of the plurality of fields; and

store the second key in a third field of the plurality of fields and a second identifier for the second cryptographic algorithm in a fourth field of the plurality of fields.

10. The computing device in accordance with claim 9 , wherein the single field is a fifth field of the plurality of fields.

11. The computing device in accordance with claim 8 , wherein the composite signature includes the first signature, the second signature, and a third signature.

12. The system in accordance with claim 1 , wherein the at least one processor is further programmed to validate the digital certificate if the first signature and the second signature are valid.

13. The system in accordance with claim 1 , wherein the at least one processor is further programmed to validate the digital certificate if the first signature is invalid and the second signature are valid.

14. The system in accordance with claim 2 , wherein the at least one processor is further programmed to validate the digital certificate if the first signature and the second signature are invalid and the third signature is valid.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 14, 2019
From: PALA, MASSIMILIANO
To: CABLE TELEVISION LABORATORIES, INC
Reel/Frame 050708/0787 →
Continuity (3)
Provisional Application 62713165 · Aug 1, 2018
Provisional Application 62869953 · Jul 2, 2019
Related Publication 20210006417A1 · Jan 7, 2021
Cited By (2)
US 12,200,122 US 12,567,981