效率的인 認證書 狀態 및 經路 檢證 시스템에 관한 硏究 = (A) Study on system with a function of efficient certificate status and path validation

다국어 초록 (Multilingual Abstract)

Nowadays PKI(Public Key Infrastructure) is known as very general security infrastructure for establishment of secure internet environment. Many countries already established their Digital Signature Act and have designated several licensed CAs under the law. Through such a PKI environment, many users already deployed PKI-enabled applications or are considering to do them. Nevertheless, in terms of general network environment's prospective, there is a critical problem should be solved relating for certificate status check and certification path validation.
Although lots of technologies relating to certificate verification issues have been developed and standardized, definitely exact and perfect solution did not develop yet. We propose an efficient certificate status check and certification path validation method for specially real-time based client/server environment with huge scale in Internet environment. The proposed system provides an outstanding efficiency and cost-effectiveness in viewpoint of relying party such as large-scaled server of a internet banking, and so on.
The concept of proposed scheme is that before a sender will send a digital signature to a recipient who is big server with lots of client, he/she contacts the VA(Validation Authority) server and gets some initial information from it. And then he/she receives a VC(Validation Certificate) with a result of checking certificate status and path validation. After received VC, he/she sends a digital signature made by him/her and VC to the target server. At that time, the target server, that is relying party, is no need to check the authenticity of the used certificate based on CRL, and so on. Instead of it, the server only checks the authenticity of the VC only using one-time hash operation.
By using the proposed scheme, the users can establish an efficient PKI enabled application and system for large-scaled real-time client/server system based on Internet. Through such the implementation, the relying party gets rid of a critical risk that could be happened in real-time client/server environment, and had bad influence on stable operation of the system.

목차 (Table of Contents)

• 목차
• ◇ 표목차
• ◇ 그림목차
• ◇ 기호설명
• 1. 서론 = 1
• 2. PKI 관련 연구 현황 분석 = 4
• 2.1 PKI의 기본적 이해 = 4
• 2.2 PKI 기술 및 표준 개요 = 8
• 2.2.1 배경 = 8
• 2.2.2 PKI 기술 영역 분류 및 표준화 현황 = 9
• 2.2.3 인증서 및 CRL 프로파일 분석 = 15
• 2.2.4 인증서 경로 검증 방법론 = 35
• 3. 인증서 상태 및 경로 검증 관련 연구 = 37
• 3.1 인증서 상태 검증 관련 기술 분석 = 37
• 3.1.1 CRL 기반 방법론 = 39
• 3.1.2 온라인 상태 확인 기반 방법론 = 41
• 3.1.3 비표준 신개념 기반 방법론 = 43
• 3.1.4 기존 메커니즘들의 문제점 분석 = 44
• 3.2 인증서 경로 검증 관련 기술 분석 = 52
• 3.2.1 SCVP = 52
• 3.2.2 DVCSP = 52
• 4. 제안하는 효율적인 인증서 상태 및 경로 검증 시스템 = 53
• 4.1 사용환경 모델 및 평가기준 정의 = 53
• 4.1.1 사용 환경 모델 정의 = 54
• 4.1.2 평가기준 정의 = 55
• 4.2 제안 시스템 = 59
• 4.2.1 구성요소 = 59
• 4.2.2 약어 및 기호 = 60
• 4.2.3 제안 시스템 = 62
• 4.3 제안 시스템 분석 = 71
• 4.3.1 목표 요구조건 만족 여부 분석 = 71
• 4.3.2 기존 방식 비교 분석 = 72
• 5. 결론 = 77
• 참고문헌 = 79
• Abstract = 85