(An) efficient certificate revocation in public key infrastructure

Abstract

The growth of electronic commerce and personal communications on the Internet heightens concern about the security and privacy problem. Public key infrastructure (PKI) that create, manage and revoke the certificates is popular as the security infrastructure in there. A fundamental problem of a scalable PKI is the lack of an efficient and scalable certificate revocation scheme. Conventional schemes require more network bandwidth and resource consumption as more scalable. In this thesis, we propose a new efficient and scalable certificate revocation scheme in PKI. Based on conventional windowed revocation scheme, a proposed scheme has simple structure with one timer and simple cache management. To compare the performance of a proposed scheme with that of a conventional windowed revocation scheme, we also propose a probability model. From simulation results under our model, a proposed scheme reduces network bandwidth from reducing a burden of certificate authority (CA) and also reduces resource consumption from a simple and efficient cache management. Therefore, It is shown that a proposed scheme performs better than a conventional windowed revocation scheme.