| 一种新的PKI证书撤销机制 |
| |
| 引用本文： | 雷璟,阳富民,胡贯荣.一种新的PKI证书撤销机制[J].华中科技大学学报(自然科学版),2002,30(11):13-15. |
| |
| 作者姓名： | 雷璟 阳富民 胡贯荣 |
| |
| 作者单位： | 华中科技大学计算机科学与技术学院 |
| |
| 摘 要： | 根据PKI证书撤销机制的评价标准，对当前几种证书撤销机制－分段式CRLs,Delta-CRLs和重叠发布CRLs进行了分析比较。针对这几种机制的优缺点，提出了一种新的PKI证书撤销机制－重叠发布滑动窗口分段式Delta-CRLs，分析了该机制的性能。该机制减小了信任方所需下载的CRL大小，降低了CRL库的峰值负荷和平均负荷，改善了时间碎片问题和可扩展性问题。
|
| 关 键 词： | PKI证书撤销机制 公开密钥基础设施 证书撤销列表 重叠发布滑动窗口分段式 Delta－CRLs 评价标准 |
| 文章编号： | 1671-4512(2002)11-0013-03 |
| 修稿时间： | 2002年6月10日 |
A certificate revocation mechanism in PKI |
| |
| Lei Jing Yang Fumin Hu Guanrong Postgraduate,College of Computer Sci. & Tech.,Huazhong Univ. of Sci. & Tech.,Wuhan ,China..A certificate revocation mechanism in PKI[J].JOURNAL OF HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY.NATURE SCIENCE,2002,30(11):13-15. |
| |
| Authors: | Lei Jing Yang Fumin Hu Guanrong Postgraduate College of Computer Sci & Tech Huazhong Univ of Sci & Tech Wuhan China |
| |
| Institution: | Lei Jing Yang Fumin Hu Guanrong Postgraduate,College of Computer Sci. & Tech.,Huazhong Univ. of Sci. & Tech.,Wuhan 430074,China. |
| |
| Abstract: | Based on the criteria of certificate revocation mechanism in PKI, this paper analyzed and compared among several popular certificate revocation mechanisms, such as segmented CRLs, Delta CRLs and Over issued CRLs. Aiming at the advantages of the mechanisms and its disadvantages, it put forward a new certificate revocation mechanism in PKI: Over issued sliding window segmented Delta CRLs and analyzed the performances of this method. The mechanism minimized the size of CRLs that relying parties had to download, the peak and average loads on CRL repositories, alleviated time granularity and scalability. |
| |
| Keywords: | public key infrastructure(PKI) certificate revocation list (CRL) over issued sliding window segmented Delta CRLs |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
