Improvement And Research On Mechanism Of Certificate Revocation Based On PKI

Information security is one of the hot topic of the society when the public key system is thought to be the key technology to deal with the problem. The Public Key Infrastructure(PKI) is widely used as a normal public infrastructure.The digital certificate can be unavailable during the available time in PKI which is called the certificate undo. The thesis research the certificate undo in PKI, improve the architecture, mechanism and application, which makes certificate undo more efficient.The thesis include the following parts:1. Research the related theory of PKI certificate undo, including the code system, PKI and the concept and method of certificate undo.2. Improve the architecture of certificate undo including the model, the environment and the evaluation criterion based on the content used now.3. Improve the CRL and OCSP. Based on the analysis and judgment of CRL and OCSP, the thesis present some method to improve them separately.4. Present a selection mode between CRL and OCSP based on the different application environment and take some situation as examle.