(Network Services Basics) Notification of Certificate Revocation Status between Different Domains under a PKI System (<Special Issue> Object-Oriented Technologies)

概要

論文の詳細を見る
When public key certificates are used to control access by a client in one domain to a server in another domain, the certificate revocation status should be distributed to the server domain too. For security reasons, the distribution of information to other domains should be minimized, and external distribution points are subject to attack from third parties on the Internet. In this paper, we propose a mechanism to convey the current revocation status of certificates to other domains securely under PKI (Public Key Infrastructure) system in WWW environment. Because our proposal does not need to modify the standard browsers, we can introduce the proposed method to the current WWW environment easily. We implemented prototype system of our proposal, and evaluated the system to prove the effectiveness of this system.
一般社団法人情報処理学会の論文
2003-06-15