一种改进的OCSP证书撤销方案

AN IMPROVED SOLUTION FOR REVOKING OCSP CERTIFICATE

在WPKI中,无线终端设备必须验证服务器证书是否己经撤销。撤销验证是一个复杂的处理过程,因此要选择一个代价较小、简单可靠、适合无线环境的撤销验证方案。在已有的OCSP(On-line Certificate Status Protocol)方案基础上提出一种新的方案,称之为改进的OCSP方案。它是对OCSP协议的改进,能够用较小的代价获得证书的实时状态。给出了这种方案的详细设计,并和其他方案进行了比较。

In WPKI it is a complex processing procedure in authenticating whether a server certificate has been revoked or not on which a wireless terminal equipment has to do, therefore there is the need to select a revocation authentication solution of less cost, simple and reliable as well as suitable for wireless condition. A new solution is proposed in this article called improved OCSP solution based on existing OCSP schemes. It is the modification over OCSP, and can obtain timely information regarding the revocation status of a server certificate at a low cost. Its design is given in detail, and compared with other solutions.