原创力文档- 1、本文档共25页，可阅读全部内容。
- 2、原创力文档（book118）网站文档一经付费（服务费），不意味着购买了该文档的版权，仅供个人/单位学习、研究之用，不得用于商业用途，未经授权，严禁复制、发行、汇编、翻译或者网络传播等，侵权必究。
- 3、本站所有内容均由合作方或网友上传，本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺！文档内容仅供研究参考，付费前请自行鉴别。如您付费，意味着您自己接受本站规则且自行承担风险，本站不退款、不进行额外附加服务；查看《如何避免下载的几个坑》。如果您已付费下载过本站文档，您可以点击 这里二次下载。
- 4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等，请点击“版权申诉”（推荐），也可以打举报电话：400-050-0827(电话支持时间：9:00-18:30)。
查看更多
Based on work at Queen’s University in co-operation with Entrust
November 12, 2004
1
Centre for Quantifiable Quality of Service in Communication Systems
Developments in Public Key
Certificate Revocation
Norsk Kryptoseminar 2004
08.11.2004
André ?rnes, PhD student
andre.arnes@q2s.ntnu.no
November 12, 2004
2
Centre for Quantifiable Quality of Service in Communication Systems
Background
? NORDSEC 2000 “ Selecting Revocation Solutions for PKI”
? The thesis ‘Public Key Certificate Revocation Schemes’ was submitted
to the Norwegian University of Science and Technology in February
2000.
? Based on work at Queen’s University in co-operation with Entrust
Technologies. The work was supervised by Henk Meijer, Steve Lloyd,
Mike Just, and Svein J. Knapskog.
November 12, 2004
3
Centre for Quantifiable Quality of Service in Communication Systems
Agenda
? Certificate revocation
? Certificate revocation schemes
? Discrete event simulations
? Conclusion
? Further work
November 12, 2004
4
Centre for Quantifiable Quality of Service in Communication Systems
Certificate Revocation
? The action of declaring a certificate invalid before its validity period is at end
? Requires a separate mechanism to inform all users about revoked certificates
? The revocation status of all certificates in the certification path must be checked
? Example reasons:
– Key compromize
– Change in user or identification data
– Change of relationship between user and CA
– Change of key allowed key usage
“A nuisance or system bug that
defeats the very purpose of PKC”
November 12, 2004
5
Centre for Quantifiable Quality of Service in Communication Systems
Certificate Validation
? Process for checking certificate validity;
? Tester:
- Validity Period;
- Integrity;
- Certificate path;
- Intended key usage;
- Revocation status
November 12, 2004
6
Centre for Quantifiable Quality of Service in Communication Systems
Evaluation Criteria
? Performance
? Timeliness
? Scalability
? Security
? Standards compliance
? Expressiveness
? Scheme management
? On-line v. Off-line
November 1
您可能关注的文档
- An Empirical Comparison of Networks and Routing Strategies for Parallel.pdf
- An empirical comparison of.pdf
- An empirical study of bank efficiency in China after WTO.pdf
- An evaluation exercise for word alignment.pdf
- An example of a master production schedule.pdf
- An experimental comparison of imitation paradigms used in social robotics.pdf
- an extensive comparison of recent classification tools applied to microarry data 2005.pdf
- An extensive library of 2500-10500 Ang synthetic spectra.pdf
- An extensive library of synthetic spectra covering the far red, RAVE and GAIA wavelength ra.pdf
- An Extra Long X-Ray Plateau in a Gamma-Ray Burst and the Spinar Paradigm.pdf
文档评论（0）