大规模PKI系统中证书撤销机制的研究与设计  

Research and design of certificate revocation mechanism in the large scale PKI system

作　　者：王桢[1] 岳峰[1] 蔡哲[2] 

机构地区：[1]中原工学院网络中心,河南郑州450007 [2]中原工学院研究生处,河南郑州450007

出　　处：《郑州轻工业学院学报（自然科学版）》2008年第3期90-94,共5页Journal of Zhengzhou University of Light Industry:Natural Science

摘　　要：针对大规模PKI系统用户多、被撤销证书数量大、系统异常复杂等特征,采用分段CRL和增量CRL相结合的方式,设计了一种混合型CRL机制,以适应大规模PKI系统的应用要求.According to large-scale PKI system had many users is large number of the revoked certificate, most complex of the system and other characteristics. An omnibus certificate revocation mechanism was designed that uses a combination of segmented CRL and delta-CRL, it can be used in a large scale PKI system.

关 键 词：PKI 证书撤销 CRL 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]