Analysis and Design of Certificate Revocation Mechanism
Chen Hua-yong
Abstract
Chen Hua-yong
Abstract
Certificate revocation is the most costly aspect of running a large scale PKI.This paper analyzes several different certificate revocation mechanisms,compares CRL,Delta-CRL,Segment CRL and Over-issued CRL in peak request rate,peak bandwidth and user query cost and discusses their disadvantages and merits.Finally,certificate revocation systems are presented based on vary PKI scale.
A significance statement is not available in the OpenAlex record.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
Certificate revocation is the most costly aspect of running a large scale PKI.This paper analyzes several different certificate revocation mechanisms,compares CRL,Delta-CRL,Segment CRL and Over-issued CRL in peak request rate,peak bandwidth and user query cost and discusses their disadvantages and merits.Finally,certificate revocation systems are presented based on vary PKI scale.
Key concepts: Revocation list, Computer science, Revocation, Root certificate, Certificate, Public key infrastructure, Certificate authority, Public key certificate