Publication Type
Conference Paper
Version
submittedVersion
Publication Date
6-2006
Abstract
Public key infrastructure provides a promising foundation for verifying the authenticity of communicating parties and transferring trust over the internet. The key issue in public key infrastructure is how to process certificate revocations. Previous research in this aspect has concentrated on the tradeoffs that can be made among different revocation options. No rigorous efforts have been made to understand the probability distribution of certificate revocation requests based on real empirical data. In this study, we first collect real empirical data from VeriSign and derive the probability function for certificate revocation requests. We then prove that a revocation system will become stable after a period of time. Based on these, we show that different certificate authorities should take different strategies for releasing certificate revocation lists for different types of certificate services. We also provide the exact steps by which certificate authorities can derive optimal releasing strategies.
Discipline
Computer Sciences
Research Areas
Cybersecurity
Publication
the 15th USENIX Security Symposium (USENIX Security 2006)
First Page
17-28
Citation
Ma, Chengyu; Hu, Nan; and Li, Yingjiu.
On the Release of Crls in Public Key Infrastructure. (2006). the 15th USENIX Security Symposium (USENIX Security 2006). 17-28.
Available at: https://ink.library.smu.edu.sg/sis_research/603
Creative Commons License
This work is licensed under a Creative Commons Attribution-NonCommercial-No Derivative Works 4.0 International License.