无线PKI中证书状态查询机制研究与实现  

Research and implementation of certificate retraction technologies in WPKI

作　　者：于文乾[1] 李大兴[1] 

机构地区：[1]山东大学,山东济南250100

出　　处：《计算机工程与设计》2006年第20期3771-3773,3782,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2001AA141120)

摘　　要：无线PKI技术在移动电子商务中扮演着重要角色,而证书状态查询机制是其关键部件。对无线PKI中的3种常见的证书状态查询机制进行了分析和比较;OCSP协议能够提供实时的证书状态查询服务,但由于无线PKI的特殊限制,并不能直接应用于无线PKI环境中。在充分考虑无线PKI特殊的限制条件基础上,给出了一种基于OCSP协议的适合无线PKI环境的证书状态查询设计方案;详细描述了该设计在具体实现中需要特别注意的几项关键技术,以提高系统的性能和安全性。WPKI plays an important role in mobile e-commerce, and the certificate retraction technology is its key component. The three common certificate retraction technologies in WPKI are analyzed and compared; the OCSP protocol can provide the real time service for certificate retraction, however, it is not suitable to be applied in WPKI immediately for the special restriction ofWPKI. A design based on the OCSP protocol is provided, which is custom-built for the WPKI; several key technologies in its implementation are also described in detail to improve the efficiency and security of the system.

关 键 词：无线PKI 在线证书状态协议 证书撤销列表 短命证书 证书状态查询 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]