CRL与OCSP相结合的证书撤销方案

Certificate Revocation Scheme Based on CRL and OCSP

提出了一个基于CRL和OCSP策略的新的证书撤销方案。首先分析比较了CRL和OCSP协议的优缺点,然后结合两者的优点通过建立一个请求处理服务器提出了一个新的证书撤销方案,最后对改进方案的优劣做了分析总结。

This paper presents a new certificate revocation schem e based on CRL and OCSP policies in PKI. CRL and OCSP policies are introduced, ana lyzed and compared in detail firstly, and in view of the advantages from both sc hemes a new certificate revocation method is suggested by introducing a Request - Response Server. Finally, the disadvantages and advantages from the new schem e are analyzed.