摘要： 对传统的证书验证过程进行了研究,分析了下属层次信任模型的性质以及在该模型中证书路径的性质,提出了证书路径有效期的概念。并在此基础上,提出了基于可信证书路径库的证书验证服务器模型,给出了系统的设计与实现方案。该模型简化了证书使用实体对证书进行验证的过程,在保证证书验证高效性的基础上,提高了证书验证的实时性和可靠性。

关键词: 下属层次信任模型, 可信证书路径, 证书验证, 路径有效期

Abstract: This paper studies the traditional certificate validation process and the attributes of subordinated hierachical models and their certificate paths, puts forward a concept on the validity period of a certificate path. And a service model is put forward base on a trusted certificate path database. This model simplifies the certificate validation process, improves the speed, real time and reliance of certificate validation process.

中图分类号: 

• TP393.08