Abstract: A PKI mechanism is facilitated in a bandwidth-limited distributed environment by creating a periodic chain of PKI related updates. Changes in CRLs are reflected by periodically created DeltaCRL objects that are part of a continuous chain. The DeltaCRL objects allow for the iterative generation of an updated CRL from a known base CRL within the timeframe of the DeltaCRL chain. Updating of CRL data at bandwidth-limited remote nodes of the distributed environment is facilitated by transmitting a relatively small data object instead of transmitting a complete and bandwidth-taxing updated CRL.

Abstract: A rule-based cryptographic services module is provided by way of a CAPI interface so as to provide security services over a plurality of protocols. The rule-based module applies logical rules to processing results provides from the plurality of protocols to identify an appropriate processing method for each request for security services received by the module. Accordingly, a greater degree of efficiency and speed are provided when processing cryptographic services requests over the CAPI interface.