Browse > Article
http://dx.doi.org/10.13089/JKIISC.2003.13.6.97

A Study on Distributed OCSP for minimizing the load of OCSP Server based on PKI  

Ko, Hoon (대진대학교 컴퓨터공학과)
Jang, Eui-Jin (숭실대학교 컴퓨터학과)
Shin, Yong-Tae ((주)디지캡스)
Abstract
The important factor in Public-Key Infrastructure is the authentication to correspondent. We receive the digital certificate for authentication between each other, and then we check the existence of validity on the certificate by Certification Revocation List(CRL). But, To use CRL is the scheme used in offline status. So, it is impossible to refer to the latest information and the CRL scheme which is used after downloading is variously unsuitable to getting bigger of the CRL size as time goes on. Therefore, we prefer OCSP(Online Certificate Status Protocol) used in online to CRL used in offline. Consequently, we propose the scheme which provides the request of fast verification in case of requesting the verification on the certificate by owning the same update information to Certificate Registry and distributed OCSP.
Keywords
OCSP; Public-Key; CRL; Authentication;
Citations & Related Records
Times Cited By KSCI : 1  (Citation Analysis)
연도 인용수 순위
1 On-line Certificate Status Protocol, cersion2 /
[ M.Myers;R.Ankney;C.Adams ] / IETF Dratf (draft-ietf-pkix-ocspv2-01.txt)
2 Delegated Path Discovery with OCSP /
[ M.Myers;S.Farrell;C.Adams ] / IETF Draft (draft-ietf-pkix-ocsppath00.txt)
3 Delegated Path Validation and Delegated Path Discovery Protocols /
[ RD.Pinkas ] / IETF Draft (draft-ietf-pkix-dpvdld-00.txt)
4 New Directions In Cryptography /
[ W.Diffie;M.Hellman ] / IEEE Trans on Information Theroy
5 Internet X.509 Public Key Infrastructure Online Cerificate Status Protocol-OCSP /
[ M.Myers;R.Ankney;A.Malpani;S.Galperin;C.Adams ] / RFC2560;IETF Standard
6 Delegated Path Validation /
[ M.Myers;C.Adams;S.Farrell ] / IETF Draft (draft-jetf-pkix-ocsp-valid-00.txt)
7 Intranet X.509 Public Key Infrastructure Certificate and CRL Profile /
[ R.Housley;W.Ford;W.Polk;D.Solo ] / RFC2459