| 在线证书状态协议与状态机关 |
| |
| 引用本文： | 佘堃,周明天.在线证书状态协议与状态机关[J].计算机研究与发展,2002,39(6):672-677. |
| |
| 作者姓名： | 佘堃 周明天 |
| |
| 作者单位： | 电子科技大学计算机学院,成都,610054 |
| |
| 基金项目： | 本课题得到国家“八六三”高技术研究发展计划应急计划基金资助（863-301-07-09） |
| |
| 摘 要： | 讨论了在线证书状态协议（OCSP）,首次提出了状态机关（SA）的概念,并根据OCSP协议定义的HTTP模式,衍生出能与其它任何应用程序结合的TCP模式,定义了它的通用访问接口,而且将之加入到安全中间件国家标准草案中,最后,设计了基于消息中间件的推送SA结构,解决了SA的吞吐量问题,给出了实际环境下SA请求的测试数据,并讨论了它的开销成本.
|
| 关 键 词： | 公钥基础设施（PKI） 联机证书状态协议（OCSP） 状态机关（SA） 签证机关（CA） 黑名单（CRL） |
| 修稿时间： | 2001年1月15日 |
ONLINE CERTIFICATE STATUS PROTOCOL AND STATUS AUTHORITY |
| |
| SHE Kun and ZHOU Ming-Tian.ONLINE CERTIFICATE STATUS PROTOCOL AND STATUS AUTHORITY[J].Journal of Computer Research and Development,2002,39(6):672-677. |
| |
| Authors: | SHE Kun and ZHOU Ming-Tian |
| |
| Abstract: | In this paper, online certificate status protocol (OCSP) is depicted and status authority (SA) is put forward for the first time. According to the HTTP-based model that is OCSP defined, a TCP-based model which can be combined with any other application is derived and its common interfaces are defined and added to the national standard draft about security middleware. Finally, in order to solve those problems about SA thruput, a "push" SA architecture based on message-oriented middleware is designed, and a testing data diagram of SA fetching in a real environment is given and its cost discussed. |
| |
| Keywords: | public key infrastructure online certificate state protocol state authority certificate authority certificate revocation list |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
