一种基于P2P共享下载模式的证书撤销机制  

Research on certificate revocation mechanism based on P2P shared download scheme

作　　者：李国敬[1,2] 温涛[1] 

机构地区：[1]东北大学信息科学与工程学院,辽宁沈阳110004 [2]中共烟台市委党校,山东烟台264000

出　　处：《微型机与应用》2011年第7期50-52,56,共4页Microcomputer & Its Applications

摘　　要：基于增量CRL证书撤销机制,提出了基于P2P共享下载模式的证书撤销机制。在Delta-CRL的发布周期内,CA发布Base-CRL和Delta-CRL,用户除初始化外,其他时刻只需下载Delta-CRL即可。当用户提出请求,通过洪泛机制查询相应节点和资源的信誉度记录,找到最优记录节点,建立P2P连接。然后,将下载的CRL模块在客户端重构以获得完整的CRL。与其他CRL相比,该方法能够有效减少CRL的下载尺寸,真正降低通信载荷以及系统的峰值请求率,提供更为及时的证书撤销信息。Based on Deha-CRL, the paper proposes a revocation scheme based P2P shared download mechanism. During the issuing period of Deha-CRL, CA issues Base-CRL and Deha-CRL. Users at the elients only need to download Deha-CRL except for initialization. When a user requires for download through flooding, it inquires the related node＇s resource and node credit records. It finds out the right node and creates P2P connection. Thus total CRL will be obtained by reorganization in the clients. Comparing to other CRL schemes, the scheme can efficiently decrease the download size of CRL, lower the traffic load and release the average request frequency of the system. It will provide more timely certificate information.

关 键 词：公钥基础设施 证书撤销列表 信誉度 P2P模式 

分 类 号：TP309.08[自动化与计算机技术—计算机系统结构]