摘要
分析有线环境现有证书状态查询方案的基础上,提出了一种对传统的 O C S P进行了改进的方案-用户端部分缓存的ocsp方案,并将其与其他证书状态查询方案进行了比较。该方案借鉴了哈希链的思想,具有很高的安全性,可以有效减少用户端及服务器端的运算量,降低带宽负荷,适合用作无线环境下的证书状态查询方案。
Following brief introduction of the main revocation policies, a modification over traditional OCSP, client partially cached-OCSP, is proposed which can efficiently reduce not only the computation at the client and server side but also the band load. Then the scheme is evaluated and compared with other policies. Making reference to the thought of HASH chain, this scheme is more secure than the old ones and is suitable for wireless environment with limited processing and storage capacity at the client side.
出处
《网络安全技术与应用》
2004年第7期55-58,27,共5页
Network Security Technology & Application
基金
国家 863 计划(2002AA143021)
2003 教育部优秀青年教师资助计划
2003 教育部科学技术研究重点项目资助。
关键词
公钥基础设施
数字签名
证书状态查询
计算机网络
网络安全
Wireless PublicKey Infrastructure
Certificate Revocation List
On-line Certificate Status Protocol
HASH chain
