Blockchain-based certificate management
Systems and methods for a blockchain-based OCSP responder using smart contracts and custom URI scheme for certificate revocation management. Various embodiments include, responsive to a requirement to determine status of a digital certificate, obtaining blockchain information from the digital certificate; interacting with a specified blockchain network based on the blockchain information; and determining a status of the digital certificate based on the Interacting.
1. A method comprising steps of:
responsive to a requirement to determine status of a digital certificate, obtaining blockchain information from the digital certificate;
interacting with a specified blockchain network based on the blockchain information; and
determining a status of the digital certificate based on the interacting with the specified blockchain network.
2. The method of claim 1 , wherein the blockchain information includes a Uniform Resource Identifier (URI) in an extension field of the digital certificate with the URI for the specified blockchain network.
3. The method of claim 2 , wherein the URI in the extension field is utilized in lieu of an Online Certificate Status Protocol (OSCP) Uniform Resource Locator (URL).
4. The method of claim 1 , wherein the blockchain information includes a smart contract address in the specified blockchain network.
5. The method of claim 1 , wherein the blockchain information includes a method for requesting the digital certificate's status in the specified blockchain network.
6. The method of claim 1 , wherein the status of the digital certificate is one of good, revoked, and unknown.
7. The method of claim 1 , wherein the steps further include:
responsive to a Certificate Authority (CA) for the digital certificate revoking the digital certificate by adding a transaction to the specified blockchain network, determining the status of the digital certificate as revoked.
8. The method of claim 1 , wherein the steps are performed by a client device, and wherein the steps further include:
responsive to the status being revoked, deleting the digital certificate.
9. The method of claim 1 , wherein the steps are performed by an Internet of Things (IoT) device, and wherein the steps further include:
periodically querying the specified blockchain network for the digital certificate based on any of a specified trigger and a preconfigured interval.
10. The method of claim 9 , wherein the steps further include:
updating one or more additional IoT devices based on the status of the digital certificate, wherein the one or more additional IoT devices are connected to the IoT device and not connected to the Internet.
11. A non-transitory computer-readable medium comprising instructions that, when executed, cause one or more processors to perform steps of:
responsive to a requirement to determine status of a digital certificate, obtaining blockchain information from the digital certificate;
interacting with a specified blockchain network based on the blockchain information; and
determining a status of the digital certificate based on the interacting with the specified blockchain network.
12. The non-transitory computer-readable medium of claim 11 , wherein the blockchain information includes a Uniform Resource Identifier (URI) in an extension field of the digital certificate with the URI for the specified blockchain network.
13. The non-transitory computer-readable medium of claim 12 , wherein the URI in the extension field is utilized in lieu of an Online Certificate Status Protocol (OSCP) Uniform Resource Locator (URL).
14. The non-transitory computer-readable medium of claim 11 , wherein the blockchain information includes a smart contract address in the specified blockchain network.
15. The non-transitory computer-readable medium of claim 11 , wherein the blockchain information includes a method for requesting the digital certificate's status in the specified blockchain network.
16. The non-transitory computer-readable medium of claim 11 , wherein the status of the digital certificate is one of good, revoked, and unknown.
17. The non-transitory computer-readable medium of claim 11 , wherein the steps further include:
responsive to a Certificate Authority (CA) for the digital certificate revoking the digital certificate by adding a transaction to the specified blockchain network, determining the status of the digital certificate as revoked.
18. The non-transitory computer-readable medium of claim 11 , wherein the one or more processors are in a client device, and wherein the steps further include:
responsive to the status being revoked, deleting the digital certificate.
19. The non-transitory computer-readable medium of claim 11 , wherein the one or more processors are in an Internet of Things (IoT) device, and wherein the steps further include:
periodically querying the specified blockchain network for the digital certificate based on any of a specified trigger and a preconfigured interval.
20. The non-transitory computer-readable medium of claim 19 , wherein the steps further include:
updating one or more additional IoT devices based on the status of the digital certificate, wherein the one or more additional IoT devices are connected to the IoT device and not connected to the Internet.