1. A method of advising clients of a certificate authority trust level of a certificate authority on a device having a processor, the method comprising:
executing on the processor instructions that cause the device to:
responsive to receiving a certificate issued by the certificate authority for a domain:
evaluate the certificate to verify a certificate authenticity of the certificate;
upon verifying the certificate authenticity of the certificate, raise a certificate authority trust level of the certificate authority in a certificate authority trust set; and
upon failing to verify the certificate authenticity of the certificate, reduce the certificate authority trust level of the certificate authority in the certificate authority trust set; and
distribute the certificate authority trust set to the clients.
2. The method of claim 1, wherein:
the certificate is issued by the certificate authority for a domain; and
evaluating the certificate further comprises: comparing the certificate with a second certificate issued by the certificate authority for the domain.
3. The method of claim 2, wherein the certificate is associated with a revocation by the certificate authority of the second certificate.
4. The method of claim 1, wherein:
the certificate is received from at least one client to which the certificate was transmitted by a domain; and
evaluating the certificate further comprises: determining a client count of clients that received the certificate from the domain.
5. The method of claim 4, wherein evaluating the certificate to verify the certificate authenticity further comprises: evaluating a historic submission rate of the certificate from the clients that received the certificate from the domain.
6. The method of claim 1, wherein:
the certificate is issued by a certificate authority sequence comprising at least two certificate authorities beginning with a root certificate authority; and
evaluating the certificate to verify the certificate authenticity further comprises: evaluating the respective certificate authorities in the certificate authority sequence.
7. The method of claim 6, wherein evaluating the certificate authority sequence further comprises: evaluating a certificate authorities count of certificate authorities in the certificate authority sequence.
8. The method of claim 6, wherein evaluating the certificate authority sequence further comprises: evaluating a certificate authority type of the respective certificate authorities in the certificate authority sequence.
9. A certificate authority trust server that advise clients of a certificate authority trust level of a certificate authority, the server comprising:
a processor;
a memory;
a certificate evaluator comprising instructions stored in the memory that, when executed on the processor, cause the server to, responsive to receiving a certificate issued by the certificate authority for a domain:
evaluate the certificate to verify a certificate authenticity of the certificate;
upon verifying the certificate authenticity of the certificate, raise a certificate authority trust level of the certificate authority in a certificate authority trust set; and
upon failing to verify the certificate authenticity of the certificate, reduce the certificate authority trust level of the certificate authority in the certificate authority trust set; and
a certificate authority trust distributor comprising instructions stored in the memory that, when executed on the processor, cause the server to distribute the certificate authority trust set to the clients.
10. The server of claim 9, wherein the certificate evaluator evaluates the certificate to verify the certificate authenticity according to a certificate scope of the certificate.
11. The server of claim 10, wherein the certificate scope of the certificate further comprises a domain count of domains for which the certificate is issued by the certificate authority.
12. The server of claim 10, wherein the certificate scope of the certificate further comprises a subdomain wildcard of the certificate.
13. The server of claim 9, wherein:
the certificate is issued by the certificate authority on behalf of a domain; and
the certificate evaluator further evaluates the certificate to verify the certificate authenticity by:
determining a domain type of the domain; and
evaluating the certificate in view of the domain type of the domain.
14. The server of claim 13, wherein determining the domain type of the domain further comprises: evaluating a domain name of the domain name to determine the domain type.
15. The server of claim 13, wherein determining the domain type of the domain further comprises:
retrieving a resource hosted by the domain; and
determining the domain type of the domain according to the resource hosted by the domain.
16. A memory device storing instructions that, when executed on a processor of a computing device, cause the computing device to advise clients of a certificate authority trust level of a certificate authority on a device having a processor, by:
responsive to receiving a certificate issued by the certificate authority for a domain:
evaluating the certificate to verify a certificate authenticity of the certificate;
upon verifying the certificate authenticity of the certificate, raising a certificate authority trust level of the certificate authority in a certificate authority trust set; and
upon failing to verify the certificate authenticity of the certificate, reducing the certificate authority trust level of the certificate authority in the certificate authority trust set; and
distributing the certificate authority trust set to the clients.
17. The memory device of claim 16, wherein:
the certificate is issued by the certificate authority using a certification technique; and
evaluating the certificate to verify the certificate authenticity further comprises:
evaluating a certification reliability of the certification technique used by the certificate authority of the certificate.
18. The memory device of claim 17, wherein executing the instructions further causes the computing device to, upon detecting a vulnerability of a compromised certification technique, advise at least one certificate authority not to use the compromised certification technique to issue certificates.
19. The memory device of claim 18, further comprising: upon determining that a certificate using the compromised certification technique was issued by a selected certificate authority after advising the selected certificate authority not to use the compromised certification technique, reduce the certificate authority trust level of the certificate authority in the certificate authority trust set.
20. The memory device of claim 18, further comprising: notifying the clients not to trust certificates using the compromised certification technique.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A power line communication (PLC) device switchable between noise detecting and filtering functions, comprising:
a power receiving port having an end connected to a power supply unit so as to receive a power signal transmitted from the power supply unit and a network signal carried by the power signal;
a filtering unit having a first end connected to an opposite end of the power receiving port;
a power output port having an end connected to a second end of the filtering unit and an opposite end electrically connected to a load so as to provide to the load the power signal transmitted from the filtering unit, and so as for the filtering unit to filter out noise generated in the power signal by the load;
a switching unit comprising a first connecting end, a second connecting end, and a control end, the first connecting end being connected to the first end of the filtering unit, the second connecting end being connected to the second end of the filtering unit, the control end being switchable to a state in which the control end is in conduction with only the first connecting end or the second connecting end; and
a processing unit connected to the control end and comprising a bridge module and a detection module, wherein when the control end of the switching unit is in conduction with the first connecting end, the noise generated in the power signal by the load is filtered out by the filtering unit, so as for the bridge module to, after receiving the power signal transmitted from the power receiving port, correctly convert the power signal into the network signal and transmit the network signal to a network apparatus; and when the control end of the switching unit is in conduction with the second connecting end, the detection module receives the power signal transmitted from the power output port and detects a level of the noise generated in the power signal by the load.
2. The power line communication device of claim 1, wherein the processing unit further comprises a display module, the display module being connected to the detection module so that the detection module can, after detecting the level of the noise generated in the power signal by the load, display a detection result through the display module.
3. The power line communication device of claim 2, wherein the bridge module is connected to the network apparatus through a physical connecting line so as to deliver the network signal to the network apparatus.
4. The power line communication device of claim 2, wherein the bridge module delivers the network signal to the network apparatus by wireless transmission.
5. A power line communication (PLC) device switchable between noise detecting and filtering functions, comprising:
a power receiving port having an end connected to a power supply unit so as to receive a power signal transmitted from the power supply unit and a network signal carried by the power signal;
a filtering unit having a first end connected to an opposite end of the power receiving port;
a switching unit comprising a first connecting end, a second connecting end, and a control end, the first connecting end being connected to the first end of the filtering unit, the second connecting end being connected to a second end of the filtering unit, the control end being switchable to a state in which the control end is in conduction with only the first connecting end or the second connecting end;
a power output port having an end connected to the control end and an opposite end connected to a load; and
a processing unit connected to the first end of the filtering unit and comprising a detection module and a bridge module, wherein once the control end of the switching unit is switched into conduction with the first connecting end, the detection module receives the power signal transmitted from the power output port and detects a level of noise generated in the power signal by the load; and once the control end is switched into conduction with the second connecting end, the noise generated in the power signal by the load is filtered out by the filtering unit, so as for the bridge module to, after receiving the power signal transmitted from the power receiving port, correctly convert the power signal into the network signal and transmit the network signal to a network apparatus.
6. The power line communication device of claim 5, wherein the processing unit further comprises a display module, the display module being connected to the detection module so that the detection module can, after detecting the level of the noise generated in the power signal by the load, display a detection result through the display module.
7. The power line communication device of claim 6, wherein the bridge module is connected to the network apparatus through a physical connecting line so as to deliver the network signal to the network apparatus.
8. The power line communication device of claim 6, wherein the bridge module delivers the network signal to the network apparatus by wireless transmission.
9. A power line communication (PLC) device switchable between noise detecting and filtering functions, comprising:
a power receiving port having an end connected to a power supply unit so as to receive a power signal transmitted from the power supply unit and a network signal carried by the power signal;
a filtering unit having a first end connected to an opposite end of the power receiving port;
a switching unit comprising a first connecting end, a second connecting end, and a control end, the first connecting end being connected to the first end of the filtering unit, the second connecting end being connected to a second end of the filtering unit, the control end being switchable to a state in which the control end is in conduction with only the first connecting end or the second connecting end; and
a processing unit connected to the control end and comprising a bridge module and a detection module, wherein when the control end of the switching unit is in conduction with the first connecting end, the processing unit is directly connected to the power receiving port, thus allowing the detection module to detect a level of noise in the power signal; and when the control end of the switching unit is in conduction with the second connecting end, the processing unit is connected to the power receiving port through the filtering unit so as for the filtering unit to filter out the noise in the power signal, and for the bridge module to, after receiving the power signal transmitted from the power receiving port, correctly convert the power signal into the network signal and transmit the network signal to a network apparatus.