序列号设计优化海量证书状态查询

随着中国电子认证市场规模的不断扩大,证书认证中心发证量迅速攀升,在实际应用场合,数字证书的应用越来越普遍。在线证书状态查询是海量公钥基础设施进行证书有效性验证的核心手段,在海量发证和大规模证书应用的场景下,如何提高验证效率成为其应用推广的关键点。通过对证书状态查询过程进行分析,可以在公钥基础设施设计时将证书序列号设计为分段模式,同时改进证书状态查询过程,提升在线证书状态查询的响应性能。

Enhancement of OCSP Performance of Mass Certification System by Serial Number Design

With the increasing expansion of China＇s electronic certification market, the certificate number issued by CA（Certificate Authority） rapidly rises, and the digital certificate is widely applied in practice. Online certificate status query is the core means of mass public key infrastructure for certificate validation, thus how to improve verification efficiency becomes the key point in promoting the certificate application under mass certificate issue and large-scale certificate application. Through analyzing the certificate status query process, the certificate serial number might be designed according to the segmented model in the design of public key infrastructure, this could improve the performance of online certificate status query response.