【摘要】 证书撤销管理是大规模公钥基础设施PKI中十分重要且耗费最多的操作。分析了在PKI实施中应用的证书撤销机制,比较了证书撤销列表CRL、增量CRL、分段CRL与重复颁发CRL在峰值请求大小、网络带宽影响、用户查询代价等方面的性能,指出了各种机制的优缺点,最后对不同PKI规模中的证书撤销系统进行了设计和性能分析。更多还原

【Abstract】 Certificate revocation is the most costly aspect of running a large scale PKI.This paper analyzes several different certificate revocation mechanisms,compares CRL,Delta-CRL,Segment CRL and Over-issued CRL in peak request rate,peak bandwidth and user query cost and discusses their disadvantages and merits.Finally,certificate revocation systems are presented based on vary PKI scale.更多还原