Verification And Improvement Of Simple Online Certificate Status Protocol

PKI is the foundation on which the recent network security was build. It offers security service platform for the application of electronic commerce and e-government. There are 9 PKI series standard in our country. In addition, several correlative national standards were figured into establish plan. To improve the quality of these standards and guarantee the security of information system, it is significant to verify and investigate the technical target and operating condition of these standards. The main work of this paper is as follows:1. A contrastive analysis of the development and research on PKI technology between our country and other countries, and a conclusion of the gap. It is important and indispensable for us to construct the PKI system and formulate standard independently.2. A research on the basic framework and the providing services of PKI system. Analyzed the courses of the application and the standardization of PKI technique all over the world. Especially, point out the primal problem in the researches of PKI series standard and the construction of PKI system in our country.3. An analysis of the structure and the function of verification platform for the key standards of PKI and a detailed illustration of the technique of PKI series standard verification. Analyzed the scope, the content and the procedure of standard verification.4. The comparison of two famous certificate status query schemes. Focused on the feature of SOCSP protocol and the defects existed in the standard draft for deliberation.5. Further, it has analyzed the major problems in the SOCSP standard draft for approval. Discussed the security breaches in design proposal of SOCSP standard draft for approval and gave some solutions to improve.