| CPC H04L 9/3268 (2013.01) [H04L 9/14 (2013.01); H04L 9/30 (2013.01); H04L 63/0823 (2013.01); H04L 67/12 (2013.01); H04W 4/40 (2018.02); H04W 12/041 (2021.01); H04W 12/069 (2021.01); H04L 2209/42 (2013.01)] | 19 Claims |

|
1. In a security credential management system wherein certificates are created and managed for communications among a plurality of entities, a method comprising:
generating by an end entity a caterpillar key pair and an expansion function, wherein the caterpillar key pair comprises a caterpillar private key and a caterpillar public key; and
sending by the end entity the caterpillar public key and the expansion function in connection with a certificate request requesting one or more certificates for use by the end entity;
wherein the caterpillar public key can be expanded using the expansion function to generate a cocoon public key;
wherein the caterpillar public key is modified by a cocoon key expander;
wherein the caterpillar public key and the expansion function are butterfly key parameters;
wherein the butterfly key parameters can be used to generate both a respective signing key associated with a particular certificate and a respective encryption key used to encrypt the particular certificate on issuance.
|