基于二次剩余问题的证书撤销改进方案  

An Improved Certificate Revocation Scheme Based on Quadratic Residues Problem

作　　者：周会娟[1] 贾耿华[1] 张永胜[1] 

机构地区：[1]洛阳理工学院数理部,河南洛阳471600

出　　处：《计算机安全》2009年第5期1-3,共3页Network & Computer Security

基　　金：河南省自然科学基金(N0.072300410180);河南省高校科技创新人才基金(No.2008HASTIT029)

摘　　要：证书撤销问题是PKI大规模应用中的瓶颈,针对这个问题,研究者从缩减通信开销、减轻网络负载的角度出发已经提出了许多解决方案,这些方案各有优缺点。对已有的基于二次剩余问题的撤销方案进行了分析,指出该方案存在的安全缺陷,并提出了改进方案。改进方案的安全性大大增强,同时还继承了基于二次剩余问题撤销方案的及时性好、传输量小等优点。The problem of certificate revocation has bottlenecked large-scale application of PEI. Considering the reduction of the traffic and the network load, researchers have advanced lots of revocation solutions to solve the problem,of which each has some strengths and weaknesses. The paper analyzes the Revocation Scheme Based on Quadratic Residues Problem in which a serious security leaks are found, and gives a improved scheme. The new scheme is better than the old in security, and as well as the old in timeliness and transmission quantity.

关 键 词：二次剩余 证书撤销 PKI 

分 类 号：TP309.08[自动化与计算机技术—计算机系统结构] TN918.1[自动化与计算机技术—计算机科学与技术]