Design of Certificate Validation Protocol for On-line Financing Transaction using Virtual Identifier Information of Signer

Certificate issued from certification authority can be revoked by a variety of reasons such as loss of private key, loss of qualification, and change of key. For such reasons, validation protocol of certificate, which can check status of certificate that is used in transactions on real-time basis, is required. The most generally protocols used these days are the use of the CRL (certificate revocation list) and the OCSP (online certificate status protocol). But the CRL can not give the real-time certificate status because the certificate is being delivered periodically, and the OCSP is structural concentration problem generated that one node handling all transactions. It will also take a long time to validate the certificate because each trade has to send mass information through the network. In this paper, we propose the protocol of real-time certificate validation that solves network overload and communication bottleneck by requesting certification using virtual identifier information of signer. Also, we confirm speed of certificate validation faster than existing CRL and OCSP protocol by test