Design of a Real-Time Certificate Status Validation Mechanism Using Identity Information Hash Value of Signer


The KIPS Transactions:PartC, Vol. 13, No. 2, pp. 147-154, Apr. 2006
10.3745/KIPSTC.2006.13.2.147,   PDF Download:

Abstract

The certificate status validation mechanism is a critical component of a public key infrastructure based on certificate system. The most generally mechanisms used these days are the use of the certificate revocation list and the real-time certificate status protocol. But the certificate revocation list can not give the real-time certificate status because the certificate is being delivered periodically, and the real-time certificate status protocol method will generate a concentrated load to the server because the protocol in the central server will be accessed whenever a certification is necessary. It will also take a long time to validate the certificate because each trade has to send mass information through the network. This paper will present that real-time validation is guaranteed as the real-time certificate status protocol method and the traffic congestion in the network is reduced in a way that the certification would be requested using the user information hash value and would be validated using the user information kept in the certification authorities and the service providers. Based on the this study, we suggest a real-time certificate status validation mechanism which can reduce the certificate status validation time using the signed user information hash value. And we confirm speed of certificate status verification faster than existing CRL(Certificate Revocation List) and OCSP(Online Certificate Status Protocol) method by test.


Statistics
Show / Hide Statistics

Statistics (Cumulative Counts from September 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article
[IEEE Style]
H. C. Kim, J. J. Kim, J. H. Lee, H. S. Oh, M. S. Jun, "Design of a Real-Time Certificate Status Validation Mechanism Using Identity Information Hash Value of Signer," The KIPS Transactions:PartC, vol. 13, no. 2, pp. 147-154, 2006. DOI: 10.3745/KIPSTC.2006.13.2.147.

[ACM Style]
Hyun Chul Kim, Jung Jae Kim, Jong Hee Lee, Hae Seok Oh, and Moon Seog Jun. 2006. Design of a Real-Time Certificate Status Validation Mechanism Using Identity Information Hash Value of Signer. The KIPS Transactions:PartC, 13, 2, (2006), 147-154. DOI: 10.3745/KIPSTC.2006.13.2.147.