高性能OCSP系统的设计与实现  

Design and implementation of efficient OCSP system

作　　者：张茜[1] 朱艳琴[1] 罗喜召[1] 

机构地区：[1]苏州大学计算机科学与技术学院,江苏苏州215006

出　　处：《计算机工程与设计》2009年第4期873-875,879,共4页Computer Engineering and Design

基　　金：国家自然科学基金项目(60673041)

摘　　要：在对在线证书状态协议(OCSP)深入分析的基础上,针对目前OCSP协议并没有规定响应器用来检索证书状态的信息源以及大量请求到达OCSP响应器易造成其崩溃等问题,利用CA证书库作为OCSP响应器的信息源并采用Hash表缓存机制、预签名技术和多线程机制,提出了一种高性能OCSP系统的实现方案。该方案极大提高了OCSP响应的正确性和及时性。Based on the deep analysis of online certificate status protocol （OCSP）, according to the problems that the information source by which the responder searches the status of certificate is not regulated in OCSP and the responder may crash when a lot of requests arrive, a highly efficient implementation of OCSP system is proposed, which takes the certificate repository of CA as the information source of the OCSP responder and uses Hash-table, signature in advance and multi-thread technology. This implementation greatly improves the correctness and timeliness of OCSP responses.

关 键 词：公钥基础设施(PKI) 在线证书状态协议(OCSP) 证书状态 预签名 多线程 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]