Reducing Certificate Revocation Cost using NPKIA. Levi and C. K. KocTrusted Information, The New Decade Challenge, IFIP TC11 16th International Conference on Information Security, pages 51-59, M. Dupuy and P. Paradinas, editors, Kluwer Academic Publishers, Boston, MA, June 11-13, 2001.AbstractProblems with certificate revocation status control limit the deployment of Public Key Infrastructure (PKI). Classical certificate paths require revocation control of all certificates on the path. In this paper, we show how the recently proposed NPKI (Nested certificate based PKI) system reduces the number of revocation status controls to at most two. Our analysis also shows that NPKI is not as vulnerable as classical PKI considering the certificate authority compromise. |