Invention Grant
US09300478B2 Splitting certificate status responses evenly across multiple distributed certificate status responders
有权
在多个分布式证书状态响应者之间均匀地分发证书状态响应
- Patent Title: Splitting certificate status responses evenly across multiple distributed certificate status responders
- Patent Title (中): 在多个分布式证书状态响应者之间均匀地分发证书状态响应
-
Application No.: US14186591Application Date: 2014-02-21
-
Publication No.: US09300478B2Publication Date: 2016-03-29
- Inventor: Hoa Ly , Hari Veladanda
- Applicant: SYMANTEC CORPORATION
- Applicant Address: US CA Mountain View
- Assignee: SYMANTEC CORPORATION
- Current Assignee: SYMANTEC CORPORATION
- Current Assignee Address: US CA Mountain View
- Agency: Patterson + Sheridan
- Main IPC: H04L29/06
- IPC: H04L29/06 ; H04L9/32 ; G06F21/33

Abstract:
Techniques are disclosed for evenly distributing certificate status validity messages across multiple response servers. A certificate authority (CA) may partition subsets of online certificate status protocol (OCSP) responses to each be handled by OCSP response servers. The partitions are based on serial numbers of the underlying digital certificates of the OCSP responses. For example, to determine which OCSP response server is assigned to distribute a particular OCSP response, a modulo operation may be performed between the last octet value of the underlying certificate serial number and the total number of available OCSP response servers of the CA. The result yields a partition number that may be used to identify the corresponding OCSP response server.
Public/Granted literature
- US20150244533A1 SPLITTING CERTIFICATE STATUS RESPONSES EVENLY ACROSS MULTIPLE DISTRIBUTED CERTIFICATE STATUS RESPONDERS Public/Granted day:2015-08-27
Information query