PKI中CRL撤消延迟的研究

A Study on CRL Revocation Delay of PKI

首先建立了使用 CRL发布证书撤消信息的数学模型 .在对模型进行分析得基础上 ,对撤消延迟进行了分析 ,得到了撤消延迟的表达式并提出了发布 CRL的最佳方法 .最后给出了计算机仿真结果 ,对理论分析正确性进行了验证 .

Public Key Infrastructure (PKI) is a infrastructure of asymmetric encryption that delivers strong capabilities for services such as data confidentiality,authentication,integrity and non-repudiation to effectively mitigate various risks involved in a network environment. The PKI infrastructure ensures that the availability of a well conceived combination of services,communications methods and protocols to its constituent applications and programs. It means that the infrastructure provides a blanket to enable the interoperability of its constituent parts for available,reliable,and unobtrusive security services. In this paper,a model of CRL disribution is set up. By analyzing the revocation delay,we get the expression of revocation delay.The simulation result is also given,which proved correctness of our analysis .