一种基于分段的CRL改进方案  

AN IMPROVED CRL SCHEME BASED ON SEGMENTATION

作　　者：郑志勇[1] 余舟华[1] 徐蕾[1] 

机构地区：[1]沈阳航空工业学院计算机学院,辽宁沈阳110136

出　　处：《计算机应用与软件》2009年第12期271-272,277,共3页Computer Applications and Software

摘　　要：分析了有序顺序表和二叉排序树表的证书撤销列表方案的不足,提出了一种基于分段的证书撤销列表CRL(Certificate Revocation List)改进方案,给出了按撤销证书到期的时间间隔的分段策略,并对CRL结构进行了改进。通过分析表明,缩短了证书用户查找撤销证书的平均搜索长度,在CRL更新时,不但减少了其它已撤销证书的移动次数,而且还减少了CA对CRL重新签名的计算量。This paper discusses the disadvantages in CRL scheme of the ordered sequential list and of the binary sorted tree respectively, and an improved CRL scheme based on segmentation is proposed. Also the paper presents the segmentation policy which is according to the expiration interval of the revocative certificate, so CRL structure is modified. By the analysis, the new scheme is shown to be able to reduce the average search length when the certificate users search the revocative certificate. When the CRL has been updated,this scheme can reduce the number of other revocative certificate＇ s move,and can reduce the computation load of CA for CRL renewing the signature.

关 键 词：公钥基础设施 证书撤销列表 CA 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] P315.5[自动化与计算机技术—计算机科学与技术]