分段重复发布证书撤销方案的分析与研究  

Study on fragmented repeated released certificate revocation scheme

作　　者：张洪瀚[1] 王燕[1] 

机构地区：[1]哈尔滨商业大学计算机与信息工程学院,哈尔滨150028

出　　处：《哈尔滨商业大学学报（自然科学版）》2009年第5期546-548,共3页Journal of Harbin University of Commerce：Natural Sciences Edition

摘　　要：随着电子商务和电子政务不断的普及,数字证书作为网上安全的重要工具,占有着举足轻重的地位.证书撤销机制是PK I面临的一个主要的问题.许多撤销机制已经被提出,CRL是最简单、最容易的实现方法,但是如何有效地分布已经撤销的证书是CRL所面临的一个挑战.提出利用折叠运算对证书进行分段,形成证书分段链表,并对不同的链表分配不同的发布时间.进行了效率分析,证明提出的改进方案是有效的.Along with the popularizing of the electronic commerce and electronic government, digital certificate as the vital tool of the web secure occupies a decisive position . Certificate revocation mechanism is one of the many challenges faced by PKI . Many schemes is proposed for certificate revocation . CRL, although straight forward and easy to implement, suffer when faced with the challenge of efficient distribution of certificate revocation information. This paper uses folding procedure for the certificate to segmentation and become segmentation lists. Moreover, every list have par particular publish time. It is solved that our improvement scheme is valid.

关 键 词：电子商务 数字证书 证书撤销机制 CRL 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]