基于NOVOMODO的证书状态服务系统的改进与实现  

Improvement and implementation of NOVOMODO-based certificate status server system

作　　者：李益波[1] 熊选东[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2009年第22期5071-5074,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2008AA01Z404)

摘　　要：PKI中证书状态查询机制的选择和实施直接影响着应用系统的效率,NOVOMODO是一个高效的验证机制。在分析其工作原理的基础上,给出了改进方案NOVOMODO-OSA系统。改进方案具有较好的及时性和灵活性,并且继承了原方案通信量小、验证效率高的优点。分析了改进方案的几个关键问题,研究了EJBCA的体系结构,设计了改进方案的实现框架,并在EJBCA中进行了实现。The efficiency of PKI is directly affected by its revocation schemes. NOVOMODO is an efficient revocation scheme. The work mechanism of NOVOMODO scheme is studied and analyzed and its deficiency is pointed out. An improved scheme NOVOMODOOSA is proposed, which it has good timeness and flexibility and architecture of EJBCA is studied. An implementation framework of improved scheme is presented and achieved in EJBCA.

关 键 词：状态服务中心 NOVOMODO 证书状态 EJBCA PKI 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]