Towards a framework for evaluating certificate status information mechanisms

Computer Communications

Volumn 26, Issue 16 SPEC., 2003, Pages 1839-1850

  Iliadis, John ^a   Gritzalis, Stefanos ^a   Spinellis, Diomidis ^b   De Cock, Danny ^c   Preneel, Bart ^c   Gritzalis, Dimitris ^b  

^a UNIVERSITY OF THE AEGEAN   (Greece)

^b ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

^c UNIVERSITY OF LEUVEN   (Belgium)

Author keywords

Certificate; Certificate revocation; Certificate revocation list; Certificate revocation status; Certificate revocation tree; Certificate status; Evaluation framework

Indexed keywords

ELECTRONIC COMMERCE; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; MATHEMATICAL MODELS; SOCIETIES AND INSTITUTIONS;

CERTIFICATE STATUS;

INFORMATION RETRIEVAL;

EID: 0042378467     PISSN: 01403664     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0140-3664(03)00079-3     Document Type: Article

References (23)

1. I.S. Iliadis, D. Spinellis, S. Katsikas, B. Preneel, A Taxonomy of Certificate Status Information Mechanisms, Proceedings of Information Security Solutions Europe ISSE 2000, Barcelona, Spain, September 2000. European Forum for Electronic Business.
2. Directive 1999/93/EC of the European Parliament and of the Council on a Community framework for electronic signatures, 13 December 1999.
3. H. Nilsson, P. Van Eecke, M. Medina, D. Pinkas, N. Pope, European Electronic Signature Standardization Initiative, ICTSB, Final Report of the EESSI Expert Team, 20 July 1999.
4. S. Berkovits, S. Chokhani, J.A. Furlong, J.A, Geiter, J.C. Guild, Public Key Infrastructure Study: Final Report. Produced by the MITRE Corporation for NIST, April 1994.
5. US National Institute of Standards and Technology, A Public Key Infrastructure for US Government unclassified but sensitive applications, September 1995.
6. ISO/IEC 9594-8, Open Systems Interconnection - The Directory: Authentication Framework, 1994.
7. S. Chokhani, W.Ford, Internet X.509 Public Key Infrastructure, Certificate Policy and Certification Practices Framework, (Status: INFORMATIONAL) Request for Comments 2527, March 1999 (available at http://www.ietf.org/rfc/rfc2527.txt).
8. C. Adams, S. Farrell, Internet X.509 Public Key Infrastructure Certificate Management Protocols, Request for Comments 2510, 1999 (available at http://www.ietf.org/rfc/rfc2510.txt ).
9. R. Housley, W. Ford, W. Polk, D. Solo, Internet X.509 Public Key Infrastructure, Certificate and CRL Profile, IETF PKIX Working Group, Request for Comments 2459 (Category: Standards Track), January 1999 (available at http://www.ietf.org/rfc/rfc2459.txt ).
10. S. Santesson, W. Polk, P. Barzin, M. Nystroms, IETF PKIX Working Group, Internet X.509 Public Key Infrastructure, Qualified Certificates Profile, Internet Draft, February 2000 (available at http://www.ietf.org//internet-drafts/draft-ietf-pkix-qc-03.txt ).
11. M. Myers, R. Ankney, A. Malpani, G. Galperin, C. Adams, Internet X.509 Public Key Infrastructure, Online Certificate Status Protocol, IETF PKIX Working Group, Request for Comments 2560 (Category: Standards Track), January 1999 (available at http://www.ietf.org/rfc/rfc2560.txt ).
12. R. Housley, W. Ford, W. Polk, D. Solo, IETF PKIX Working Group, Internet X.509 Public Key Infrastructure, Certificate and CRL Profile, Internet Draft, October 1999 (available at http://www.ietf.org//internet-drafts/draft-ietf-pkix-new-part1-00.txt ).
13. S. Micali, Efficient Certificate Revocation, Technical Memo 542b, Laboratory for Computer Science, Massachusetts Institute of Technology, March 1996.
14. Rivest R.L. Can we eliminate certificate revocation lists? Financial Cryptography FC'98, Anguilla, British West Indies, February. 1465:1998;Springer.
15. Stubblebine S.G. Recent-Secure Authentication: Enforcing Revocation in Distributed Systems. Proceedings of the IEEE Symposium on Research in Security and Privacy, May, Oakland. 1995.
16. Naor M., Nassim K. Certificate revocation and certificate update. Proceedings of the Sixth USENIX Security Symposium, January. 1998;217-228.
17. Kocher P. On certificate revocation and validation. Financial Cryptography FC'98, Anguilla, British West Indies, February. 1465:1998;Springer.
18. C. Adams, R. Zuccherato, A General, Flexible Approach to Certificate Revocation, White Paper, Entrust Technologies.
19. T. Berners-Lee, R. Fielding, L. Masinter, Uniform Resource Identifiers (URI): Generic Syntax, (Draft Standard), August 1998 (available at http://www.ietf.org/rfc/rfc2396.txt).
20. P. Hallam-Baker, OCSP Extensions, IETF Internet Draft, September 1999.
21. D.W. Chadwick, Internet X.509 Public Key Infrastructure, Operational Protocols: LDAPv3 (Category: Standards Track), August 1999.
22. B. Fox, B. LaMacchia, Certificate Revocation: Mechanics and Meaning, Proceedings of Financial Cryptography 98, LNCS 1465, New York, Springer, 1998.
23. I. Iliadis, On the Dissemination of Certificate Status Information, MSc Thesis, Department of Mathematics, Royal Holloway and Bedford New College, University of London, UK, 1999.