基于P2P网络的Over-Issued CRL机制研究  

Research of Over-Issued CRL mechanism based on P2P network

作　　者：邱钊[1] 陈明锐[1] 

机构地区：[1]海南大学信息科学技术学院,海口570228

出　　处：《计算机工程与应用》2011年第1期80-82,88,共4页Computer Engineering and Applications

基　　金：海口市重点科技计划项目(No.2009-038)

摘　　要：目前关于公钥基础设施(public key infrastructure)中证书撤销问题的主要解决方案是使用X.509证书撤销列表(Certifi-cate Revocation List)来定期发布证书状态信息。现有的发布机制存在CRL存储库峰值负荷过重,导致PKI部署成本过高的问题。通过对Over-Issued CRL模型和P2P技术的分析,给出一种基于P2P网络和Over-Issued CRL发布机制,它结合了上述两种技术的优点,有效降低了CRL存储库峰值负荷。At present,the main solution scheme in public key infrastructure of certificate revocation problem is to use X.509 certificate revocation list.The existing methods have some problems such that peak load on CRL repository is too heavy to deploy a large-scale PKI with reasonable cost.By analyzing Over-Issued CRL model and P2P network,an approach to distribute CRL is given based on the above models.It combines the advantages of above two models,reduces the peak load of CRL repository effectively.

关 键 词：证书撤销列表 公钥基础设施 过量发布证书撤消列表 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]