一种改进的OCSP证书撤销方案  

AN IMPROVED SOLUTION FOR REVOKING OCSP CERTIFICATE

作　　者：邓光[1] 鲁士文[2] 刘耀明[3] 

机构地区：[1]中国科学院研究生院,北京100039 [2]中国科学院计算技术研究所,北京100080 [3]桂林工学院,广西桂林541004

出　　处：《计算机应用与软件》2009年第4期249-252,共4页Computer Applications and Software

摘　　要：在WPKI中,无线终端设备必须验证服务器证书是否己经撤销。撤销验证是一个复杂的处理过程,因此要选择一个代价较小、简单可靠、适合无线环境的撤销验证方案。在已有的OCSP(On-line Certificate Status Protocol)方案基础上提出一种新的方案,称之为改进的OCSP方案。它是对OCSP协议的改进,能够用较小的代价获得证书的实时状态。给出了这种方案的详细设计,并和其他方案进行了比较。In WPKI it is a complex processing procedure in authenticating whether a server certificate has been revoked or not on which a wireless terminal equipment has to do, therefore there is the need to select a revocation authentication solution of less cost, simple and reliable as well as suitable for wireless condition. A new solution is proposed in this article called improved OCSP solution based on existing OCSP schemes. It is the modification over OCSP, and can obtain timely information regarding the revocation status of a server certificate at a low cost. Its design is given in detail, and compared with other solutions.

关 键 词：无线公钥基础设施 在线撤销机制 改进的在线撤销机制方案 

分 类 号：TP309.08[自动化与计算机技术—计算机系统结构] TP393[自动化与计算机技术—计算机科学与技术]