PKI中CRL撤消延迟的研究  

A Study on CRL Revocation Delay of PKI

作　　者：张雪琳[1] 马跃[1] 王玮[1] 徐塞虹[1] 

机构地区：[1]北京邮电大学计算机科学与技术学院,北京100876

出　　处：《系统工程理论与实践》2004年第3期91-94,共4页Systems Engineering-Theory & Practice

摘　　要：首先建立了使用 CRL发布证书撤消信息的数学模型 .在对模型进行分析得基础上 ,对撤消延迟进行了分析 ,得到了撤消延迟的表达式并提出了发布 CRL的最佳方法 .最后给出了计算机仿真结果 ,对理论分析正确性进行了验证 .Public Key Infrastructure (PKI) is a infrastructure of asymmetric encryption that delivers strong capabilities for services such as data confidentiality,authentication,integrity and non-repudiation to effectively mitigate various risks involved in a network environment. The PKI infrastructure ensures that the availability of a well conceived combination of services,communications methods and protocols to its constituent applications and programs. It means that the infrastructure provides a blanket to enable the interoperability of its constituent parts for available,reliable,and unobtrusive security services. In this paper,a model of CRL disribution is set up. By analyzing the revocation delay,we get the expression of revocation delay.The simulation result is also given,which proved correctness of our analysis .

关 键 词：公开密钥基础设施 证书撤消列表 撤消延迟 证书策略 总等待发布时间 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]