OPTIMAL DATABASE CONSTRUCTION INTERVAL FOR CERTIFICATE REVOCATION LIST IN PKI

摘要

This paper describes the optimal issue interval for a certificate revocation list (CRL) in PKI. We analyze Delta CRL method whose kernel is defined by X.509 in the International Organization for Standardization, and consider the optimization problem, by making the trade-off with the issues of Delta CRL and Base CRL. We propose a stochastic model to evaluate the issue of Delta CRL, and discuss analytically and numerically an optimal issue interval of Base CRL which minimizes the expected cost.