| 一种高效实用的证书验证机制的研究 |
| |
| 引用本文： | 徐向阳,蒋国清,费巧玲,潘勇. 一种高效实用的证书验证机制的研究[J]. 计算机工程与设计, 2007, 28(3): 536-537,541 |
| |
| 作者姓名： | 徐向阳 蒋国清 费巧玲 潘勇 |
| |
| 作者单位： | 湖南大学计算机与通讯学院,湖南,长沙,410082;湖南大学计算机与通讯学院,湖南,长沙,410082;湖南大学计算机与通讯学院,湖南,长沙,410082;湖南大学计算机与通讯学院,湖南,长沙,410082 |
| |
| 摘 要： | 在公钥基础设施当中,数字证书有可能在没有到期就要撤销它.PKI主要提供了两种证书撤销方法,就是周期性发布的证书撤销列表CRL和在线证书状态协议OCSP.详细地分析了CRL和OCSP两种证书撤销机制的优点和局限性,结合两者各自的优点,提出了一个高效实用的证书验证机制.给出了该机制的工作原理,并详细地介绍了的实现方法.
|
| 关 键 词： | 公钥基础设施 数字签名 证书撤销列表 在线证书状态协议 证书状态 数字证书 |
| 文章编号： | 1000-7024（2007）03-0536-02 |
| 修稿时间： | 2006-01-19 |
Research on efficient and useful mechanism of certificate revocation |
| |
| XU Xiang-yang,JIANG Guo-qing,FEI Qiao-ling,PAN Yong. Research on efficient and useful mechanism of certificate revocation[J]. Computer Engineering and Design, 2007, 28(3): 536-537,541 |
| |
| Authors: | XU Xiang-yang JIANG Guo-qing FEI Qiao-ling PAN Yong |
| |
| Affiliation: | School ofComputerandCommunication, HunanUniversity, Changsha410082, China |
| |
| Abstract: | In the PKI there is the possibility that the digital certificate is revocated in the due.Two certificates revocating methods areprovided in PKI.They are CRL and OCSP.The advantage and disadvantage of CRL and OCSP mechanism are detailedly analysed atfirst.And a new certificate validating mechanism is put forward by using advantage of CRL and OCSP.Its' principle and realizationmethod are introduced. |
| |
| Keywords: | public key infrastructure digital signature certificate revocation list online certificate status protocol certificate status digital certificate |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
