摘要： 针对公钥基础设施PKI中证书吊销问题，提出一种B_树解决方案，将查询与更新时的最大时间复杂度始终保持在O(logd((n+1)/2)+1)量级，与其他方案相比，当数据量特别大时，更能显示其优越性，同时介绍基于B_树的证书管理方案。实验结果表明，该方案对工程实现具有一定指导意义。

关键词: 公钥基础设施, 证书权威, 证书吊销, 二叉搜索树, B_树

Abstract: Aiming at the certificate revocation problems in Public Key Infrastructure(PKI), a Certificate Revocation B_Tree(CRBT) scheme is proposed, which keeps maximal time complexity as O(logd((n+1)/2)+1) in query and update process. Compared with other schemes, it shows more superiority when the data volume is extreme huge. The certificate management scheme based on B_tree is introduced. Experimental results show this scheme is significant to engineering implementation.

Key words: Public Key Infrastructure(PKI), Certificate Authority(CA), certificate revocation, binary search tree, B_tree

中图分类号: 

• TP309