一种增强型证书撤销机制

The Research of a Kind of Enhancement CRL

在PKI系统中,证书持有者的密钥可能因为失效、被破解等原因,不得不进行证书的撤销。在本文中,从证书撤销列表出发,根据已有的三种CRL增强机制,提出一种新的增强方案,有效解决CRL机制在应用中的各种问题。

In the PKI system,it has no otion but to revote the certificates for some reasons,for example,the key of certificate holder＇s key was disable or cracked.In this paper,it begins with the CRL（certificate revocation list） and gives a new enhancement solution which is based on three CRL enhancement mechanism.This solution will effictively solve the problems of CRL mechanism in the various of applications.