Reducing Certificate Revocation and Non-repudiation Service in Public Key Infrastructure

• SAMESHIMA Yoshiki

  R & D, Hitachi Software Engineering Co., Ltd.

• TSUTSUMI Toshiyuki

  R & D, Hitachi Software Engineering Co., Ltd.

抄録

This paper describes User Attribute with Validity Period extension field of public key certificate and Certificate Verification Service with Time Stamp. The field and service solve the problems of unavailability of the latest revoked certificate information, large size of the revocation information and lack of non-repudiation mechanism of the X.509 Authentication Framework. The proposed extension field is useful to reduce the revoked certificate information sent from CA of an organization where there are periodical personel changes. The Certificate Verification Service with Time Stamp is an on-line service providing certificate status and non-repudiation service. The paper shows how the combination of the field and service solves the problems and that the server can serve hundrdes of thousands of messaging system users, and the security of the service is also discussed.

収録刊行物

• IEICE transactions on fundamentals of electronics, communications and computer sciences

  IEICE transactions on fundamentals of electronics, communications and computer sciences 83 (7), 1441-1449, 2000-07-25

  一般社団法人電子情報通信学会

キーワード

• X.509 authentication framework
• public key certificate
• certificate revocation list
• non-repudiation
• time stamp

詳細情報

• CRID: 1572543027240230016
• NII論文ID: 110003208672
• NII書誌ID: AA10826239
• ISSN: 09168508
• 本文言語コード: en
• データソース種別:
  • CiNii Articles