基于EJB的OCSP协议分析与改进

OCSP Protocol Analysis and Development Based on EJB

证书状态查询是PKI中的一个关键问题,OCSP是解决这个问题的一种重要机制.本文在分析J2EE结构特点的同时,对EJB应用服务中OCSP协议的实现过程作了描述.对OCSP协议存在的问题及基于EJB下的OCSP应用方面存在的局限性进行了分析.最后,就提高在线证书状态查询的性能提出了改进思路和一些思考.

Certificate status query is one of the crucial problems in PKI,and OCSP is an important mechanism to solve this problem.This paper analyzes the structure characteristic of J2EE,and describes the process of OCSP protocol in EJB application service.It also analyzes existing problems of OCSP protocol and the limitation by using OCSP based on EJB.Finally,this article lists some proposals about how to improve the online certificate status query's capability.