Research on CRL distribution in P2P systems

摘要

How to revoke certificates efficiently in a peer-to-peer network without central server is an unsolved problem. In this paper we bring forward a certificate revocation system based on Chord. In order to resolve the climax bottleneck problem of some peer node, we propose a method to flooding all other nodes with bloom filter vector of this CRL segment, using our hybrid flooding algorithm. This bloom filter vector can be flooded to every node within least TTL. Finally we do an experiment to show our system and corresponding algorithm are valid.