2026-03-06T12:35:25Z https://ipsj.ixsq.nii.ac.jp/oai

oai:ipsj.ixsq.nii.ac.jp:00011215 2025-01-23T02:22:09Z 581:651:658

Notification of Certificate Revocation Status between Different Domains under a PKI System Notification of Certificate Revocation Status between Different Domains under a PKI System ネットワークサービス基礎 Yutaka, Miyake JonathanK.Millen Grit, Denker Toshiaki, Tanaka Koji, Nakao Yutaka, Miyake Jonathan, K.Millen Grit, Denker Toshiaki, Tanaka Koji, Nakao 論文 When public key certificates are used to control access by a client in one domain to a server in another domain the certificate revocation status should be distributed to the server domain too. For security reasons the distribution of information to other domains should be minimized and external distribution points are subject to attack from third parties on the Internet. In this paper we propose a mechanism to convey the current revocation status of certificates to other domains securely under PKI (Public Key Infrastructure) system in WWW environment. Because our proposal does not need to modify the standard browsers we can introduce the proposed method to the current WWW environment easily. We implemented prototype system of our proposal and evaluated the system to prove the effectiveness of this system. When public key certificates are used to control access by a client in one domain to a server in another domain, the certificate revocation status should be distributed to the server domain too. For security reasons, the distribution of information to other domains should be minimized, and external distribution points are subject to attack from third parties on the Internet. In this paper, we propose a mechanism to convey the current revocation status of certificates to other domains securely under PKI (Public Key Infrastructure) system in WWW environment. Because our proposal does not need to modify the standard browsers, we can introduce the proposed method to the current WWW environment easily. We implemented prototype system of our proposal, and evaluated the system to prove the effectiveness of this system. 2003-06-15 eng journal article https://ipsj.ixsq.nii.ac.jp/records/11215 1882-7764 AN00116647 情報処理学会論文誌 44 6 1604 1612 https://ipsj.ixsq.nii.ac.jp/record/11215/files/IPSJ-JNL4406018.pdf application/pdf 227.1 kB 2005-06-15