Nonmonotonicity, user interfaces, and risk assessment in certificate revocation

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2339, Issue , 2002, Pages 166-177

  Li, Ninghui ^a   Feigenbaum, Joan ^b  

^a Stanford University   (United States)

^b Yale University   (United States)

Author keywords

Certificates; CRL; PKI; Revocation

Indexed keywords

CHROMIUM COMPOUNDS; CRYPTOGRAPHY; RISK ASSESSMENT; RISK MANAGEMENT;

CERTIFICATE REVOCATION; CERTIFICATES; NON-MONOTONICITY; REVOCATION; REVOCATION SCHEME;

USER INTERFACES;

EID: 84949191488     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-46088-8_16     Document Type: Conference Paper

References (20)

1. Carlisle Adams and Robert Zuccherato, “A General, Flexible Approach to Certificate Revocation,” June 1998. http://www.entrust.com/resourcecenter/pdf/certrev.pdf.
2. Carlisle Adams and Stephen Farrell, “Internet X.509 Public Key Infrastructure Certificate Management Protocols,” IETF RFC 2510, March 1999. http://www.ietf.org/rfc/rfc2510.txt.
3. David A. Cooper, “A Closer Look at Revocation and Key Compromise in Public Key Infrastructures,” in Proceedings of the 21st National Information Systems Security Conference, pp. 555-565, October 1998. http://csrc.nist.gov/nissc/1998/proceedings/paperG2.pdf.
4. David A. Cooper, “A More Efficient Use of Delta-CRLs,” in Proceedings of the 2000 IEEE Symposium on Security and Privacy, pp. 190-202, May 2000. http://csrc.nist.gov/pki/documents/sliding_window.pdf.
5. Barbara Fox and Brian LaMacchia, “Certificate Revocation: Mechanics and Meaning,” in FC’98 [7], pp. 158-164, 1998. http://www.farcaster.com/papers/fc98/fc98.ps.
6. Carl A. Gunter and Trevor Jim, “Generalized Certificate Revocation,” in Proceedings of the 27th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL 2000), pp. 316-329, January 2000. http://www.cis.upenn.edu/~qcm/papers/popl00.pdf.
7. RafaelH irschfeld (editor), Financial Cryptography: Second International Conference (FC’98), Lecture Notes in Computer Science, vol. 1465, Springer, February 1998.
8. Russell Housley, Warwick Ford, Tim Polk, and David Solo, “Internet X.509 Public Key Infrastructure Certificate and CRL Profile,” IETF RFC 2459, Janurary 1999. http://www.ietf.org/rfc/rfc2459.txt.
9. PaulK ocher, “On Certificate Revocation and Validation,” in FC’98 [7], pp. 172-177, 1998.
10. Patrick McDanielan d Sugih Jamin, “Windowed Certificate Revocation,” in Proceedings of IEEE Infocom 2000, pp. 1406-1414, March 2000. http://www.eecs.umich.edu/~pdmcdan/docs/info2000.pdf.
11. Patrick McDanielan d Aviel Rubin, “A Response to ‘Can We Eliminate Certificate Revocation Lists?’,” in Proceedings of Financial Cryptography 2000, February 2000. http://www.eecs.umich.edu/~pdmcdan/docs/finc00.pdf.
12. Silvio Micali, “Efficient Certificate Revocation,” Technical Report TM-542b, MIT Laboratory for Computer Science, March, 1996. ftp://ftp.lcs.mit.edu/pub/lcs-pubs/tm.outbox/MIT-LCS-TM-542b.ps.gz.
13. Michael Myers, “Revocation: Options and Challenges,” in FC’98 [7], pp. 165-171, 1998.
14. Michael Myers, Rich Ankney, Ambarish Malpani, Slava Galperin, and Carlisle Adams, “X.509 Internet Public Key Infrastructure Online Certificate Status Protocol-OCSP,” IETF RFC 2560, June 1999. http://www.ietf.org/rfc/rfc2560.txt.
15. Moni Naor and Kobbi Nissim, “Certificate Revocation and Certificate Update,” in Proceedings of the 7th USENIX Security Symposium, pp. 217-228, January 1998. http://www.wisdom.weizmann.ac.il/~kobbi/papers/revoke_usenix.ps.
16. Ronald L. Rivest, “Can We Eliminate Certificate Revocation Lists?” in FC’98 [7], pp. 178-183, 1998. http://theory.lcs.mit.edu/~rivest/revocation.ps.
17. Stuart G. Stubblebine, “Recent-Secure Authentication: Enforcing Revocation in Distributed Systems,” in Proceedings of the 1995 IEEE Symposium on Research in Security and Privacy, pp. 224-234, May 1995. http://www.stubblebine.com/95oak.pdf.
18. Stuart G. Stubblebine and Rebbeca N. Wright, “An Authentication Logic Supporting Synchronization, Revocation, and Recency,” in Proceedings of the Third ACM Conference on Computer and Communications Security, pp. 95-105, March 1996. http://www.stubblebine.com/96ccs.pdf.
19. Rebecca N. Wright, Patrick D. Lincoln, and Jonathan K. Millen, “Efficient Fault-Tolerant Certificate Revocation,” in Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS 2000), November 2000. http://www.research.att.com/~rwright/ccs00.ps.
20. Committee on Information Systems Trustworthiness, NationalR esearch Council, Trust in Cyberspace, NationalA cademy Press, 1999. http://www.nap.edu/html/trust/.