A Model of Certificate Validation Server

초록

For efficient handling of certificates within PKI, we present the Certificate Validation Server. This model allows a client to offload certificate handling to the server and enable to provide central administration of PKI polices. In order to obtain timely certificate status information, the server uses several methods such as CRL, OCSP, and VCDC. Also, to enhance the efficiency of certification path construction and validation, the server uses pre-making certification path that consist of CA certificates and reusing certification path. In this paper, we describe these modules and protocols used in the CVS.