基于单向哈希函数的证书撤销机制  

NEW CERTIFICATE REVOCATION SCHEME BASED ON ONE-WAY HASH-FUNCTION

作　　者：李金[1] 李杰[1] 

机构地区：[1]中南大学信息科学与工程学院,湖南长沙410083

出　　处：《计算机应用与软件》2008年第9期272-273,278,共3页Computer Applications and Software

摘　　要：证书撤销是公钥基础设施PKI(Public Key Infrastructure)研究和应用的难点问题。首先讨论了当前应用最广泛的两类证书撤销机制:证书撤销列表CRL(Certificate Revocation List)和在线证书状态协议OCSP(0nline Certificate Status Protoco1),剖析了这两种机制各自存在的不足。在此基础上,提出了一种基于单向哈希函数的证书撤销机制。Certificate revocation is always a difficult problem in study and application of Public Key Infrastructure （PKI）. In this paper it reviewed two main schemes to implement certificate revocation, that is Certificate Revocation Lists （CRL） and On-line Certificate Status Protocol （0CSP）. The working principles of these schemes were described, and the disadvantages of each scheme were also analyzed in some details. According to such discussion, a new certificate revocation scheme based on one-way Hash-function is presented.

关 键 词：单向哈希函数 公钥证书 证书撤销机制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP301.6[自动化与计算机技术—计算机科学与技术]