基于增量CRL证书撤销机制的改进  

Improved Revocation Scheme Based on Delta-CRL

作　　者：李国敬[1] 温涛[1] 

机构地区：[1]东北大学信息科学与工程学院,辽宁沈阳110004

出　　处：《广西师范大学学报（自然科学版）》2008年第4期75-77,共3页Journal of Guangxi Normal University:Natural Science Edition

基　　金：国家自然科学基金资助项目(60172403);辽宁省自然基金资助项目(20031018)

摘　　要：文章提出了改进的增量CRL机制,在Delta-CRL的发布周期内,CA发布Base-CRL和Delta-CRL,用户除初始化外,其他时刻只下载Delta-CRL即可,可在客户端重构完整的CRL。与传统增量CRL相比,能够有效减少CRL的下载尺寸,降低通信载荷,提供更为及时的证书撤销信息,而不会增加平均请求率。The paper proposes an improved scheme based on Delta-CRL. During the Delta-CRL issuing period of this scheme,CA issues both Base-CRL and Detta-CRL. Users at the clients need only to download Delta-CRL at any time except for initialization. As a result,full CRL will be obtained by reorganization at the clients. Compared with traditional Delta-CRL,the proposed scheme can efficiently decrease the download size of CRL and lower the traffic load. It can also provide timelier certificate information and will not increase the average request frequency of the system.

关 键 词：公钥基础设施(PKI) 证书撤销列表(CRL) 基准CRL 增量CRL 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]