| 基于单向哈希函数的证书撤销机制 |
| |
| 引用本文： | 李金,李杰.基于单向哈希函数的证书撤销机制[J].计算机应用与软件,2008,25(9). |
| |
| 作者姓名： | 李金 李杰 |
| |
| 作者单位： | 中南大学信息科学与工程学院,湖南,长沙,410083 |
| |
| 摘 要： | 证书撤销是公钥基础设施PKI(Public Key Infrastructure)研究和应用的难点问题.首先讨论了当前应用最广泛的两类证书撤销机制:证书撤销列表CRL(Certificate Revocation List)和在线证书状态协议OCSP(0nline Certificate Status Protoco1),剖析了这两种机制各自存在的不足.在此基础上,提出了一种基于单向哈希函数的证书撤销机制.
|
| 关 键 词： | 单向哈希函数 公钥证书 证书撤销机制 |
NEW CERTIFICATE REVOCATION SCHEME BASED ON ONE-WAY HASH-FUNCTION |
| |
| Li Jin,Li Jie.NEW CERTIFICATE REVOCATION SCHEME BASED ON ONE-WAY HASH-FUNCTION[J].Computer Applications and Software,2008,25(9). |
| |
| Authors: | Li Jin Li Jie |
| |
| Affiliation: | Li Jin Li Jie(Academy of Information Science , Engineering,Central South University,Changsha 410083,Hunan,China) |
| |
| Abstract: | Certificate revocation is always a difficult problem in study and application of Public Key Infrastructure (PKI). In this paper it reviewed two main schemes to implement certificate revocation,that is Certificate Revocation Lists (CRL) and On-line Certificate Status Protocol (OCSP). The working principles of these schemes were described,and the disadvantages of each scheme were also analyzed in some details. According to such discussion,a new certificate revocation scheme based on one-way Hash-function is p... |
| |
| Keywords: | One-way hash-function Public Key Certificate(PKC) Certificate revocation scheme |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
