| 基于排队模型的证书撤销机制分析 |
| |
| 引用本文： | 刘爱江,何大可,许长枫. 基于排队模型的证书撤销机制分析[J]. 计算机应用研究, 2004, 21(4): 68-70 |
| |
| 作者姓名： | 刘爱江 何大可 许长枫 |
| |
| 作者单位： | 西南交通大学,计算机与通信工程学院,四川,成都,610031;西南交通大学,计算机与通信工程学院,四川,成都,610031;西南交通大学,计算机与通信工程学院,四川,成都,610031 |
| |
| 摘 要： | 证书撤销机制是影响PKI服务可靠度的关键技术之一。根据撤销机制是否含有CRL服务器建立了两个基于排队论的数学模型，指出在较大规模下应用短周期证书策略是不合适的，并对分段CRL的优越性给出理论证明，最后，结合模型导出参数对实际应用中缓冲器容量的选取进行定性分析。
|
| 关 键 词： | 证书中心 证书撤销列表 PKI公钥基础结构 排队理论 |
| 文章编号： | 1001-3695(2004)04-0068-03 |
| 修稿时间： | 2003-04-16 |
Analysis of Certificate Revocation Mechanism Based on Queuing Model |
| |
| LIU Ai-jiang,HE Da-ke,XU Chang-feng. Analysis of Certificate Revocation Mechanism Based on Queuing Model[J]. Application Research of Computers, 2004, 21(4): 68-70 |
| |
| Authors: | LIU Ai-jiang HE Da-ke XU Chang-feng |
| |
| Abstract: | The mechanism of certificate revocation is one of the key considerations in Public Key Infrastructure(PKI). In the paper two different model of CA are presented, one is a basic model of CA without CRL, the other works with CRL, both of which are based on Queuing Theory. Therefore, it comes to a conclusion that segmented CRL is superior to basic CRL In some extent in theory and some parameters that are used lo choose the buffers of CRL server are put forward at last. |
| |
| Keywords: | Certificate Authority Certificate Revocation List Public Key Infrastructure (PKI) Queuing Theory |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
