Method and validation device for validating a digital certificate

1. A method for validating a predetermined digital certificate using a validation device, wherein the validation device stores permission information that specifies which digital certificates from a multiplicity of digital certificates are permissible digital certificates, and wherein the validation device furthermore stores trust information that specifies a trust level of the permitted digital certificates, the method comprising:

determining, taking into account the permission information, whether the predetermined digital certificate is permissible; and

if it is determined that the predetermined digital certificate is permissible, determining the trust level of the predetermined digital certificate taking into account the trust information; wherein the validation device stores different trust information for different uses of a digital certificate;

wherein the validation device stores different permission information for different uses of a digital certificate.

2. The method as claimed in claim 1 , furthermore comprising:

if it is determined that the trust level of the predetermined digital certificate is above a predetermined trust level, validating the predetermined digital certificate.

3. The method as claimed in claim 1 , further comprising:

using the validated digital certificate to verify data that are received from a predetermined device in order to encrypt data that are transmitted to the predetermined device, and/or in order to check a digital signature of the predetermined device.

4. The method as claimed in claim 1 , further comprising:

providing use information that specifies a planned use of the predetermined digital certificate, to the validation device;

determining, taking into account the permission information relevant to the use information, whether the predetermined digital certificate is permissible;

if it is determined that the predetermined digital certificate is permissible, determining the trust level of the predetermined digital certificate taking into account the use information.

5. The method as claimed in claim 1 , further comprising:

querying the use information by way of the validation device.

6. The method as claimed in claim 1 , further comprising:

providing the determined trust level of the predetermined digital certificate to a requesting device that requests validation of the digital certificate, and/or to a user.

7. The method as claimed in claim 1 , further comprising:

generating a certificate chain containing a plurality of predetermined certificates;

determining whether the trust level of the respective predetermined digital certificates is above the predetermined trust level; and

validating the entire certificate chain if it is determined that the trust level of the respective predetermined digital certificates is above the predetermined trust level.

8. The method as claimed in claim 1 , further comprising:

changing the permission information and/or the trust information.

9. The method as claimed in claim 8 , wherein the permission information and/or the trust information is changed depending on the current application situation, information about the requesting device, information about a certificate holder and/or information about a use context.

10. The method as claimed in claim 1 , further comprising:

deactivating part of the permission information and/or of the trust information when determining whether the predetermined digital certificate is permissible and/or when determining the trust level of the predetermined digital certificate.

11. A computer program product comprising a computer readable hardware storage device having computer readable program code stored therein, said program code executable by a processor of a computer system to implement the method as claimed in claim 1 .

12. A validation device for validating a predetermined digital certificate, the validation device comprising:

a storage unit for storing permission information and trust information, wherein the permission information specifies which digital certificates from a multiplicity of digital certificates are permissible digital certificates, and wherein the trust information specifies a trust level of the permitted digital certificates; and

a determination unit for determining, taking into account the permission information, whether the predetermined digital certificate is permissible, and for determining the trust level of the predetermined digital certificate taking into account the trust information, if the determination unit has determined that the predetermined digital certificate is permissible;

wherein the storage unit is configured so as to store different trust information for different uses of a digital certificate;

wherein the validation device stores different permission information for different uses of a digital certificate.

13. The validation device as claimed in claim 12 , suitable for performing the method as claimed in claim 1 .

14. A system for validating a predetermined digital certificate, having a validation device as claimed in claim 12 and a requesting device that requests validation of the digital certificate.