Title :
Can CRLs Provide Bandwidth-Efficient Online Certificate Status?
Author :
Lakshminarayanan, A. ; Liviandi, Aditya ; Lee, Lim Tong ; Chui, William
Author_Institution :
Inst. for Infocomm Res., Singapore
Abstract :
Providing effective certificate revocation status is an important yet burdensome aspect of PKI. It is widely assumed that certificate revocation lists (CRLs) cannot provide bandwidth-efficient online certificate status. Using our reference delta CRL scheme, we show that this assumption is not true. Clients using reference delta CRLs never download complete CRLs times they construct revocation lists locally. Our scheme performs significantly better than any earlier CRL scheme and has comparable bandwidth performance with respect to OCSP (Myers et al., 1999)
Keywords :
protocols; public key cryptography; bandwidth-efficient online certificate status; certificate revocation lists; effective certificate revocation status; online certificate status protocol; public key infrastructures; reference delta CRL; Bandwidth; Computational efficiency; Computer crime; Costs; Information security; Protection; Protocols; Public key; Public key cryptography; Scalability;
Conference_Titel :
Local Computer Networks, Proceedings 2006 31st IEEE Conference on
Conference_Location :
Tampa, FL
Print_ISBN :
1-4244-0418-5
Electronic_ISBN :
0742-1303
DOI :
10.1109/LCN.2006.322101
