Towards a framework for evaluating certificate status information mechanisms

A wide spectrum of certificate revocation mechanisms is currently in use. A number of them have been proposed by standardisation bodies, while some others have originated from academic or private institutions. What is still missing is a systematic and robust framework for the sound evaluation of the...

Full description

Saved in:
Bibliographic Details
Published in:Computer communications 2003-10, Vol.26 (16), p.1839-1850
Main Authors: Iliadis, John, Gritzalis, Stefanos, Spinellis, Diomidis, De Cock, Danny, Preneel, Bart, Gritzalis, Dimitris
Format: Article
Language:English
Subjects:
Authentication
Certificate
Certificate revocation
Certificate revocation list
Certificate revocation status
Certificate revocation tree
Certificate status
Computer security
Digital certificates
Evaluation framework
Networks
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:A wide spectrum of certificate revocation mechanisms is currently in use. A number of them have been proposed by standardisation bodies, while some others have originated from academic or private institutions. What is still missing is a systematic and robust framework for the sound evaluation of these mechanisms. We present a mechanism-neutral framework for the evaluation of certificate status information (CSI) mechanisms. These mechanisms collect, process and distribute CSI. A detailed demonstration of its exploitation is also provided. The demonstration is mainly based on the evaluation of Certificate Revocation Lists, as well as of the Online Certificate Status Protocol. Other well-known CSI mechanisms are also mentioned for completeness.
ISSN:0140-3664
1873-703X
DOI:10.1016/S0140-3664(03)00079-3