首页> 外文OA文献 >PKIX certificate status in hybrid MANET
【2h】

PKIX certificate status in hybrid MANET

机译:混合MANET中的PKIX证书状态

代理获取
本网站仅为用户提供外文OA文献查询和代理获取服务,本网站没有原文。下单后我们将采用程序或人工为您竭诚获取高质量的原文,但由于OA文献来源多样且变更频繁,仍可能出现获取不到、文献不完整或与标题不符等情况,如果获取不到我们将提供退款服务。请知悉。

摘要

Certificate status validation is a hard problem in general but it is particularly complex in Mobile Ad-hoc Networks (MANETs) because we require solutions to manage both the lack of fixed infrastructure inside the MANET and the possible absence of connectivity to trusted authorities when the certification validation has to be performed. In this sense, certificate acquisition is usually assumed as an initialization phase. However, certificate validation is a critical operation since the node needs to check the validity of certificates in real-time, that is, when a particular certificate is going to be used. In such MANET environments, it may happen that the node is placed in a part of the network that is disconnected from the source of status data at the moment the status checking is required. Proposals in the literature suggest the use of caching mechanisms so that the node itself or a neighbour node has some status checking material (typically on-line status responses or lists of revoked certificates). However, to the best of our knowledge the only criterion to evaluate the cached (obsolete) material is the time. In this paper, we analyse how to deploy a certificate status checking PKI service for hybrid MANET and we propose a new criterion based on risk to evaluate cached status data that is much more appropriate and absolute than time because it takes into account the revocation process.
机译:证书状态验证通常是一个难题,但是在移动自组织网络(MANET)中尤为复杂,因为我们需要解决方案来管理MANET内部缺少固定的基础结构以及在认证时可能无法与受信任的权威机构建立连接必须执行验证。从这个意义上讲,证书获取通常被认为是初始化阶段。但是,证书验证是一项关键操作,因为节点需要实时检查证书的有效性,也就是说,当要使用特定证书时。在这样的MANET环境中,可能会发生以下情况:将节点放在需要状态检查时与状态数据源断开连接的一部分网络中。文献中的建议建议使用缓存机制,以便节点本身或邻居节点具有一些状态检查材料(通常是在线状态响应或已撤销证书的列表)。但是,据我们所知,评估缓存(过时)资料的唯一标准是时间。在本文中,我们分析了如何为混合MANET部署证书状态检查PKI服务,并提出了一种基于风险的新标准来评估缓存的状态数据,该标准比时间更为合适和绝对,因为它考虑了吊销过程。

相似文献

  • 外文文献
  • 中文文献
  • 专利
代理获取

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号