WPKI Certificate Verification Scheme Based on Certificate Digest Signature-Online Certificate Status Protocol
WPKI Certificate Verification Scheme Based on Certificate Digest Signature-Online Certificate Status Protocol
复制标题
基于证书摘要签名的WPKI证书验证方案-在线证书状态协议
DOI：
10.1155/2018/7379364
复制
发表时间：
2018
影响因子：
--
通讯作者：
Gu K
中科院分区：
文献类型：
--
作者：
Gu Ke;Wu Na;Liu Yongzhi;Yu Fei;Yin Bo;Gu Ke;Gu Ke;Gu K;Gu K;Gu K
针对基于在线证书状态协议（OCSP）的WPKI证书验证方案存在的问题，提出了一种基于证书摘要签名-在线证书状态协议（CDS_OCSP）的WPKI证书验证方案。与现有方案相比，该方案优化了通信实体与网络之间的通信连接数，减少了证书验证过程对无线网络带宽的消耗，并使用基于椭圆曲线密码（ECC-）的加解密函数对证书摘要进行签名和验证，这确保了通信实体之间经验证的证书的一致性。该方案使证书验证过程更加高效、安全。实验结果表明，该方案有效地降低了无线网络的通信消耗，节省了无线实体的存储空间。
Aiming at the problems of the WPKI certificate verification schemes based on online certificate status protocol (OCSP), this paper proposes a WPKI certificate verification scheme based on the certificate digest signature-online certificate status protocol (CDS_OCSP). Compared with the existing schemes, the proposed scheme optimizes the number of communication connections between the communication entities and the network, reduces the consumption of the wireless network bandwidth in the certificate verification process, and uses the elliptic curves cipher- (ECC-) based encrypting/decrypting functions to sign and verify the certificate digest, which ensures the consistency of the verified certificates among the communication entities. The proposed scheme makes the certificate verification process more efficient and secure. The experimental results show that the proposed scheme effectively reduces the communication consumption of the wireless network and saves the storage space of the wireless entities.