资料下载
×
一种离线模式下CRL机制的改进方案
消耗积分:3 |
格式:rar |
大小:146 |
2009-08-13
131594
分享资料个
本文分析了几种主要的CRL 机制及OCSP 协议，并提出了一种离线模式下CRL 机制的改进方案——基于P2P 分布式CRL 列表的证书撤消系统，此系统利用CRL 发布点技术与重叠发布增量 CRL 机制相结合的理念，在数据源上对传统CRL 列表发布机制进行了改进。在机制中运用P2P 技术实现了CRL 资源的共享，并将传统的CRL 发布的C/S 体系结构改进成分散化的P2P 结构，使整个网络的信息流量分散化，这不仅降低了系统负荷而且还发挥了对等网中资源版本越多越有利于资源的发现和共享的特点，提高了用户查询CRL 列表的及时性，加强了CRL 列表的离线性能。经实践证明，方案具有较好的可行性。
关键词：证书撤消列表；点对点技术；发布点
Abstract: In this paper we analyses existing CRL schemes and Online Certificate Status Protocol, then we describe an improved scheme of off-line CRLs—a distributed system for certificate revocation, based on peer-to-peer distribution of CRLs,this system has improved traditional CRL scheme in source data by distribution points together with Over-issued
Delta CRLs,Sharing CRLs can be realized in this system by peer-to-peer technology. This scheme has improved traditional client/server scheme to dispersive peer-to-peer scheme, and has dispersed information of the whole network. This scheme not only reduce the load on system but also exert characteristic of peer-to-peer technology, that is it have more resource more resource can be discovered and shared. This scheme has improved the timeless requirements and achieved good off-line functionary. By testing, this scheme has good feasibility.
Key words: CRL ;P2P;Distribution Point
关键词：证书撤消列表；点对点技术；发布点
Abstract: In this paper we analyses existing CRL schemes and Online Certificate Status Protocol, then we describe an improved scheme of off-line CRLs—a distributed system for certificate revocation, based on peer-to-peer distribution of CRLs,this system has improved traditional CRL scheme in source data by distribution points together with Over-issued
Delta CRLs,Sharing CRLs can be realized in this system by peer-to-peer technology. This scheme has improved traditional client/server scheme to dispersive peer-to-peer scheme, and has dispersed information of the whole network. This scheme not only reduce the load on system but also exert characteristic of peer-to-peer technology, that is it have more resource more resource can be discovered and shared. This scheme has improved the timeless requirements and achieved good off-line functionary. By testing, this scheme has good feasibility.
Key words: CRL ;P2P;Distribution Point
声明：本文内容及配图由入驻作者撰写或者入驻合作网站授权转载。文章观点仅代表作者本人，不代表电子发烧友网立场。文章及其配图仅供工程师学习之用，如有内容侵权或者其他违规问题，请联系本站处理。 举报投诉
评论(0)
发评论
- 相关下载
- 相关文章
