| 基于域名系统的证书验证系统研究与实现 |
| |
| 引用本文： | 沈士根.基于域名系统的证书验证系统研究与实现[J].计算机应用,2006,26(6):1348-1350. |
| |
| 作者姓名： | 沈士根 |
| |
| 作者单位： | 嘉兴学院,信息工程学院,浙江,嘉兴,314001 |
| |
| 摘 要： | 为解决当前不同CA（Certificate Authority）间证书验证过程的互操作问题，本文在分析当前证书撤销机制问题的基础上，结合域名系统（Domain Name System，DNS）的referral模式提出了一种新的证书验证系统DNS-OCSP，使用该系统可构建不同CA间统一的证书验证，给出了DNS-OCSP的系统结构，说明了DNS-OCSP的工作流程。该系统具有较好的可存取性和可扩展性。
|
| 关 键 词： | 证书验证 域名系统 DNS-OCSP |
| 文章编号： | 1001-9081（2006）06-1348-03 |
| 收稿时间： | 2005-12-05 |
| 修稿时间： | 2005-12-052006-02-13 |
Research and implementation of certificate validation system based on DNS |
| |
| SHEN Shi-gen.Research and implementation of certificate validation system based on DNS[J].journal of Computer Applications,2006,26(6):1348-1350. |
| |
| Authors: | SHEN Shi-gen |
| |
| Affiliation: | College of Information Engineering, Jiaxing University, Jiaxing Zhejiang 314001, China |
| |
| Abstract: | For solving tile interoperability during current certificate validation process of different CAs, the new system DNS-OCSP was proposed by incorporating DNS-style referral, which can construct a unified certificate validation mechanism between different CAs. Tile architecture of DNS-OCSP was presented, and the workflow of DNS-OCSP was illuminated. It has been shown that the DNS-OCSP is more accessible and sealable. |
| |
| Keywords: | DNS-OCSP |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用》浏览原始摘要信息 |
|
点击此处可从《计算机应用》下载全文 |
|
