基于单向散列链的公钥证书撤销机制  

New Public Key Certificate Revocation Scheme Based on One-way Hash Chain

作　　者：李景峰[1] 潘恒[1] 祝跃飞[1] 

机构地区：[1]信息工程大学信息工程学院计算机与网络工程系

出　　处：《小型微型计算机系统》2006年第4期642-645,共4页Journal of Chinese Computer Systems

基　　金：国家"九七三"项目(G1999035804)资助;国家自然科学基金项目(9020415;60473021)资助;河南省杰出青年基金项目(0212001400)资助

摘　　要：证书撤销是公钥基础设施(PKI,Public Key Infrastructure)研究和应用的难点问题.本文首先讨论了当前应用最广泛的两类证书撤销机制—证书撤销列表(CRL,Certificate Revocation List)和在线证书状态协议(OCSP,Online Certificate Sta-tus Protocol),剖析了这两种机制各自存在的不足.在此基础上,提出了一种基于单向散列链的证书撤销机制.Certificate revocation is always a difficult problem of research and application of public key infrastructure （PKI）. In this paper reviewsed two main schemes to implement certificate revocation, that is, Certificate Revocation Lists（CRL） and Online Certificate Status Protocol（OCSP）. The working principles of these schemes were described, and the disadvantages of each scheme were also analyzed in some details. According to such discussion, a new certificate revocation scheme based on one-way hash chain is presented.

关 键 词：单向散列链 公钥证书 证书撤销 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]