Method for providing online certificate status service under certificate authorities

摘要

PURPOSE: A device and a method for a certificate verification service on a certification organization environment are provided to verify a state of a certificate in real-time by constructing a certificate database as detecting a state change such as revocation, update, reissuance, and suspension of the certificate. CONSTITUTION: A certificate state synchronizer(231) receives/collects the state change information of the certificates by connecting to certificate issuance servers(25). A certificate state collector(232) collects a CRL(Certificate Revocation List) by communicating with directory servers(26), analyzes the CRL by verifying validity of the CRL, and extracts the revocation certificate information included in the CRL. A certificate state database manager(233) constructs a certificate state information database(234) by using the certificate state information and the revocation certificate information, and manages the certificate state in real-time by using the constructed database. A certificate verification request processor(235) processes a request of a certificate verification client by forming a reply message including the certificate state information.