Method and apparatus for certificate roll-over
A method and an electronic apparatus for rolling over from a first to second trusted certificate in the electronic apparatus. Information containing identification data for identifying the second trusted certificate is acquired in the electronic apparatus. Also, the second trusted certificate, which is preinstalled in the electronic apparatus, is activated based on said identification data.
1. A method for rolling over from a first to second trusted certificate in an electronic apparatus; comprising
acquiring in the electronic apparatus information containing identification data for identifying the second trusted certificate; and
activating the second trusted certificate, which is preinstalled in the electronic apparatus, based on said identification data, and wherein the step of activating comprises a replay protection check as well as
determining whether a value of said identification data exceeds a certificate counter value, wherein the certificate counter value identifies the first trusted certificate in an array of trusted certificates, and only activating the second trusted certificate if the value of said identification data exceeds said certificate counter value, wherein the value of the identification data is an identifier or number which identifies the location of the second trusted certificate to activate within the array.
2. The method according to claim 1 , wherein the step of acquiring information comprises acquiring identification data for identifying one of a plurality of trusted certificates preinstalled in an array of trusted certificates, one of which may be activated at the time.
3. The method according to claim 1 , wherein the step of acquiring comprises receiving a message containing said information.
4. The method according to claim 3 , wherein the message is a push message.
5. The method according to claim 1 , wherein the step of activating comprises verifying a signature being attached to said information with a key of the second trusted certificate.
6. The method according to claim 1 , wherein the step of acquiring comprises retrieving from said information a value of said identification data, and using said value to identify a pointer or an address to said second trusted certificate.
7. The method according to claim 1 , wherein the step of activating comprises checking whether the value of the identification data exceeds a predetermined maximum value.
8. The method according to claim 1 , wherein the step of activating comprises accessing the second trusted certificate from a memory area of a memory, which is only writable during booting of the electronic apparatus.
9. An electronic apparatus for rolling over from a first to second trusted certificate, comprising
an information acquiring unit adapted to acquire information containing identification data for identifying the second trusted certificate; and
a roll-over unit adapted to activate the second trusted certificate, which is preinstalled in the electronic apparatus, based on said identification data, and wherein the roll-over unit further is adapted to make a replay protection check as well as adapted to determine whether a value of said identification data exceeds a certificate counter value, wherein the certificate counter value identifies the first trusted certificate in an array of trusted certificates, and only activating the second trusted certificate if the value of said identification data exceeds said certificate counter value, wherein the value of the identification data is an identifier or number which identifies the location of the second trusted certificate to activate within the array.
10. The electronic apparatus according to claim 9 , wherein the information acquiring unit is adapted to acquire identification data for identifying one of a plurality of trusted certificates, which are preinstalled in an array of trusted certificates, one of which may be activated at the time.
11. The electronic apparatus according to claim 9 , wherein the information acquiring unit is adapted to receive a message containing said information.
12. The electronic apparatus according to claim 11 , wherein the message is a push message.
13. The electronic apparatus according to claim 9 , wherein the roll-over unit is adapted to verify a signature being attached to said information with a key of the second trusted certificate.
14. The electronic apparatus according to claim 9 , wherein the information acquiring unit is adapted to retrieve from said information a value of said identification data, and the roll-over unit is adapted to use said value to identify a pointer or an address to said second trusted certificate.
15. The electronic apparatus according to claim 9 , wherein the roll-over unit is adapted to check whether the value of the identification data exceeds a predetermined maximum value.
16. The electronic apparatus according to claim 9 , wherein the roll-over unit is adapted to access the second trusted certificate from a memory area of a memory, which is only writable during booting of the electronic apparatus.
17. The electronic apparatus according to claim 9 , wherein the first and second trusted certificates are root certificates.
18. The electronic apparatus according to claim 9 , wherein the electronic apparatus is a portable or handheld mobile radio communication equipment, a mobile radio terminal, a mobile telephone, a pager, a communicator, an electronic organizer, a smartphone, a computer, a SIM or a smart card.
19. A computer program embodied on a non-transitory computer readable medium comprising computer executable instructions for executing the method according to claim 1 , when said computer executable instructions are run by an electronic device having computer capabilities.