摘要
在WPKI中,无线终端设备必须验证服务器证书是否己经撤销。撤销验证是一个复杂的处理过程,因此要选择一个代价较小、简单可靠、适合无线环境的撤销验证方案。在已有的OCSP(On-line Certificate Status Protocol)方案基础上提出一种新的方案,称之为改进的OCSP方案。它是对OCSP协议的改进,能够用较小的代价获得证书的实时状态。给出了这种方案的详细设计,并和其他方案进行了比较。
In WPKI it is a complex processing procedure in authenticating whether a server certificate has been revoked or not on which a wireless terminal equipment has to do, therefore there is the need to select a revocation authentication solution of less cost, simple and reliable as well as suitable for wireless condition. A new solution is proposed in this article called improved OCSP solution based on existing OCSP schemes. It is the modification over OCSP, and can obtain timely information regarding the revocation status of a server certificate at a low cost. Its design is given in detail, and compared with other solutions.
出处
《计算机应用与软件》
CSCD
2009年第4期249-252,共4页
Computer Applications and Software
关键词
无线公钥基础设施
在线撤销机制
改进的在线撤销机制方案
Wireless public key infrastructure(WPKI) Online certificate status protocol(OCSP) Improved OCSP solution