数字证书在线验证系统设计  

Design of Online Verification System of Digital Certificate

作　　者：王苏灵[1] 杜彪[1] 邓雷升[1] 

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2017年第5期1079-1083,共5页Communications Technology

摘　　要：数字证书是用来绑定身份和其相应公钥的数据文件。目前,许多数字证书应用场合为了认证的安全性,要求数字证书验证具有较高的实时性。针对定期发布CRL(证书撤消列表)不能满足实时验证证书有效性的缺点以及OCSP(在线证书状态查询协议)的局限性,设计实现了一种以OCSP协议为基础并进行扩展的数字证书在线验证系统,解决了用户数字证书实时验证需求的问题,从而增强了数字证书应用的安全性。Digital Certificates are data files used to bind identities and their corresponding public keys. At present, in order to ensure the security of the digital certificate application, the digital certificate is required to have high real-time performance. Aiming at the problem that CRL could not meet the validity of OCSP, a digital certificate online verification system based on OCSP is designed and implemented. The system could solve real-time verification of user＇s digital certificate, thus enhancing the security of the digital certificate application.

关 键 词：数字证书 OCSP(在线证书状态查询协议) 在线验证服务器 WEBSERVICES XML 

分 类 号：TN918.1[电子电信—通信与信息系统]