Abstract: The proposed certificate revocation schemes restrict algorithm performance because they fail to consider the differences between the probabilities of inquiring certificate. The certificate revocation scheme based on priority skip lists, named CRPSL, can dynamic update the storage structure of certificate revocation dictionary according to the inquiry frequency, and can shorten the enquiry path of inquiring high frequency certificate so that the inquiry speed is accelerated. The test shows that the performance of CRPSL is better than that of CRL and 2-3CRT in the sides of insertion, deletion and enquiry, and the CRPSL conform to the actual situation of certificate inquiry fairly well.

Key words: certificate revocation, skip lists, priority, public key infrastructure

摘要： 在目前已经提出的证书废除机制中，由于未考虑证书查询概率之间的差异，限制了算法的性能。基于带权跳表的证书废除机制(CRPSL)根据证书查询频度动态调整证书废除字典的存储结构，使查询频度高的证书查询路径缩短，查询速度加快。测试结果表明，CRPSL的插入、删除及查询性能均比CRL及2-3CRT高，较好地适合了证书查询的实际情况。

关键词: 证书废除, 跳表, 权值, 公钥基础设施

CLC Number: 

• TP393.08