摘要
讨论了在线证书状态协议（OCSP）,首次提出了状态机关（SA）的概念,并根据OCSP协议定义的HTTP模式,衍生出能与其它任何应用程序结合的TCP模式,定义了它的通用访问接口,而且将之加入到安全中间件国家标准草案中,最后,设计了基于消息中间件的推送SA结构,解决了SA的吞吐量问题,给出了实际环境下SA请求的测试数据,并讨论了它的开销成本.
In this paper, online certificate status protocol (OCSP) is depicted and status authority (SA) is put forward for the first time. According to the HTTP-based model that is OCSP defined, a TCP-based model which can be combined with any other application is derived and its common interfaces are defined and added to the national standard draft about security middleware. Finally, in order to solve those problems about SA thruput, a "push" SA architecture based on message-oriented middleware is designed, and a testing data diagram of SA fetching in a real environment is given and its cost discussed.
出处
《计算机研究与发展》
EI
CSCD
北大核心
2002年第6期672-677,共6页
Journal of Computer Research and Development
基金
本课题得到国家"八六三"高技术研究发展计划应急计划基金资助(863-301-07-09)
关键词
在线证书状态协议
状态机关
公钥基础设施
联机证书状态协议
签证机关
黑名单
public key infrastructure
online certificate state protocol
state authority
certificate authority
certificate revocation list
