公钥基础设施中证书撤销机制的研究与改进

从证书序列号出发，引用位标识指针将证书序列号缩减，以减少证书撤销列表（Certificate Revocation List,CRL）所需空间,提高CRL的查询速度，并成功构造了一棵新型撤销证书查询树。该树既继承了证书撤销树（Certificate Revocation Tree,CRT)证明一个证书的状态(是否被吊销)不需要整个CRT，而只与其中部分相关路径有关的优点，又克服了CRT在更新时几乎需要对整个树重新计算的缺点。该树在更新时仅需计算相关部分路径的数值，加速了撤销树的更新速度。

Research and improvement of certificate revocation mechanism in PKI

To decrease the storage space and improve the search velocity of CRL(Certificate Revocation List),a bit pointer was used to shorten the certificate number of it.And a new certificate recocation tree was proposed,which could keep the good properties of CRT(Certificate Revocation Tree) that is easy to check or prove whether a certificate is revoked or not,the check only need the related path values but not the whole CRT values.The new tree also could overcome the disadvantage of CRT that any update will cause the whole CRT to be computed,so it accelerate the speed of the CRT update.