OCSP协议是PKI中的关键技术,但是由于证书状态需要签名和验签操作,计算开销大而影响效率。 SOCSP协议是为解决OCSP协议中存在的性能瓶颈问题,并满足我国PKI系统实际应用的需求由我国自主研发的标准。主要研究了SOCSP的关键技术,重点分析简化后的协议数据的可用性和可能存在的安全漏洞,针对存在的这些问题提出改进方案。
OCSP plays an important role in PKI. For the certificate status needs to be signed and the signature needs to be verified, the calculation overhead is very high and system efficiency will reduce. To solve the bottleneck problem in OCSP and satisfy practical application in our PKI system,our country did much research and made an initial draft on SOCSP. This paper mainly introduces the availability of SOCSP(standard draft for approval) for protocol data is simplified. And then the security holes are listed. Finally,some improved methods aim to solve the problems mentioned above are induced.