A digital certificate revocation status promulgation scheme based on square residue

Current schemes to promulgate the revocation information of certificate are insufficient in real-timeness, access stability and data traffic, etc. Hence, this paper presents a new certificate revocation information promulgation scheme which is based on the mathematical puzzle that if one people has known y=x² mod n, then it is very difficult for him or she to work out x. The scheme is better than current schemes with respect to real-timeness of promulgation, data traffic, access stability, security requirement to directory server, etc. In the scheme, in order to achieve the object of real-time promulgation, the CA attaches its current system time to the response message when a user requests validating the status of a certificate, in order to improve access stability, the promulgation of certificate status is access driven.