Compressed nested certificates provide more efficient PKI
Jancic, A. and Batten, Lynn 2007, Compressed nested certificates provide more efficient PKI, in IWAP 2007 : Proceedings of the Sixth International Workshop for Applied PKC, Edith Cowan University, School of Computer and Information Science, Perth, W.A., pp. 40-50.
Attached Files
(Some files may be inaccessible until you login with your Deakin Research Online credentials)
Name
Description
MIMEType
Size
Downloads
Title
Compressed nested certificates provide more efficient PKI
IWAP 2007 : Proceedings of the Sixth International Workshop for Applied PKC
Editor(s)
Li, Dongguang
Publication date
2007
Conference series
International Workshop for Applied PKC
Start page
40
End page
50
Publisher
Edith Cowan University, School of Computer and Information Science
Place of publication
Perth, W.A.
Summary
Certificate verification in PKI is a complex and time consuming process. In the classical PKI methodology, in order to obtain a public key and to accept a certificate as valid, a verifier needs to extract a certificate path from the PKI and to verify the certificates on this path recursively. Levi proposed a nested certificate model vvith the aim to simplify and speed up certificate verification. Such a nested certificate-based PKI significantly improves certificate verification, but it also requires a large increase in the number of issued certificates, which makes this model impractical for real life deployment. In order to solve this drawback of nested PKI, while retaining its speed in certificate verification, we propose in this paper the innovative concept of a compressed nested certificate, which is a significantly modified version of the nested certificate model. Compressed nested certificate PKI deploys compressed nested certificates which speed up and simplify certificate verification while keeping certificate load to a minimum, thus providing implementers the option of integrating it into the existing PKI model or building it separately as an independent model.