| 基于P2P网络的Over-Issued CRL机制研究 |
| |
| 引用本文： | 邱钊,陈明锐.基于P2P网络的Over-Issued CRL机制研究[J].计算机工程与应用,2011,47(1):80-82. |
| |
| 作者姓名： | 邱钊 陈明锐 |
| |
| 作者单位： | 海南大学 信息科学技术学院，海口 570228 |
| |
| 基金项目： | 海口市重点科技计划项目(No.2009-038) |
| |
| 摘 要： | 目前关于公钥基础设施（public key infrastructure）中证书撤销问题的主要解决方案是使用X.509证书撤销列表（Certificate Revocation List）来定期发布证书状态信息。现有的发布机制存在CRL存储库峰值负荷过重，导致PKI部署成本过高的问题。通过对Over-Issued CRL模型和P2P技术的分析，给出一种基于P2P网络和Over-Issued CRL发布机制，它结合了上述两种技术的优点，有效降低了CRL存储库峰值负荷。
|
| 关 键 词： | 证书撤销列表 公钥基础设施 过量发布证书撤消列表 |
| 收稿时间： | 2009-8-7 |
| 修稿时间： | 2009-10-13
|
Research of Over-Issued CRL mechanism based on P2P network |
| |
| QIU Zhao,CHEN Mingrui.Research of Over-Issued CRL mechanism based on P2P network[J].Computer Engineering and Applications,2011,47(1):80-82. |
| |
| Authors: | QIU Zhao CHEN Mingrui |
| |
| Affiliation: | College of Information Science & Technology，Hainan University，Haikou 570228，China |
| |
| Abstract: | At present,the main solution scheme in public key infrastructure of certificate revocation problem is to use X.509 certificate revocation list.The existing methods have some problems such that peak load on CRL repository is too heavy to deploy a large-scale PKI with reasonable cost.By analyzing Over-Issued CRL model and P2P network,an approach to distribute CRL is given based on the above models.It combines the advantages of above two models,reduces the peak load of CRL repository effectively. |
| |
| Keywords: | Certificate Revocation Lis(tCRL) Public Key Infrastructure(PKI) Over-Issued CRL |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与应用》浏览原始摘要信息 |
|
点击此处可从《计算机工程与应用》下载全文 |
