Evaluating certificate status information mechanisms

A wide spectrum of certificate revocation mechanisms is currently in use. A number of them have been proposed by standardisation bodies, while some others have originated from academic or private institutions. What is still missing is a systematic and robust framework for the sound evaluation of these mechanisms. We present a mechanism-neutral framework for the evaluation of mechanisms, which collect, process and distribute certificate status information. A detailed demonstration of its exploitation is also provided. The demonstration is mainly based on the evaluation of Certificate Revocation Lists, as well as of the Online Certificate Status Protocol. Keywords Certificate, Certificate Revocation, Certificate Status, Certificate Revocation List, Evaluation Framework.

• Type: Conference
• Year: 2000
• Where: CCS
• Authors: John Iliadis, Diomidis Spinellis, Dimitris Gritzalis, Bart Preneel, Sokratis K. Katsikas
• Keywords: CCS 2000, Certificate Revocation, Certificate Revocation List, Certificate Status, Security Privacy