عنوان
پدید آورنده
موضوع
رده
کتابخانه
محل استقرار
INTERNATIONAL STANDARD BOOK NUMBER
Erroneous ISBN
9185457841
NATIONAL BIBLIOGRAPHY NUMBER
Number
b704602
TITLE AND STATEMENT OF RESPONSIBILITY
Title Proper
Understanding Certificate Revocation
General Material Designation
[Book]
.PUBLICATION, DISTRIBUTION, ETC
Name of Publisher, Distributor, etc.
Institutionen för systemteknik,
Date of Publication, Distribution, etc.
2006
PHYSICAL DESCRIPTION
Specific Material Designation and Extent of Item
135
SERIES
Series Title
Linköping Studies in Science and Technology. Thesis,
Volume Designation
1216
ISSN of Series
0280-7971 ;
GENERAL NOTES
Text of Note
Report code: LIU-TEK-LIC-2006:1
DISSERTATION (THESIS) NOTE
Text of Note
Lic.-avh. Linköping : Linköpings universitet, 2006.
SUMMARY OR ABSTRACT
Text of Note
Correct certificate revocation practices are essential to each public-key infrastructure. While there exist a number of protocols to achieve revocation in PKI systems, there has been very little work on the theory behind it: Which different types of revocation can be identified? What is the intended effect of a specific revocation type to the knowledge base of each entity? As a first step towards a methodology for the development of reliable models, we present a graph-based formalism for specification and reasoning about the distribution and revocation of public keys and certificates. The model is an abstract generalization of existing PKIs and distributed in nature; each entity can issue certificates for public keys that they have confidence in, and distribute or revoke these to and from other entities. Each entity has its own public-key base and can derive new knowledge by combining this knowledge with certificates signed with known keys. Each statement that is deduced or quoted within the system derives its support from original knowledge formed outside the system. When such original knowledge is removed, all statements that depended upon it are removed as well. Cyclic support is avoided through the use of support sets. We define different revocation reasons and show how they can be modelled as specific actions. Revocation by removal, by inactivation, and by negation are all included. By policy, negative statements are the strongest, and positive are the weakest. Collisions are avoided by removing the weaker statement and, when necessary, its support. Graph transformation rules are the chosen formalism. Rules are either interactive changes that can be applied by entities, or automatically applied deductions that keep the system sound and complete after the application of an interactive rule. We show that the proposed model is sound and complete with respect to our definition of a valid state.
OTHER EDITION IN ANOTHER MEDIUM
International Standard Book Number
9185457841
TOPICAL NAME USED AS SUBJECT
Annan data- och informationsvetenskap.
Area economics.
Areell ekonomi.
Computer and Information Sciences.
Data- och informationsvetenskap.
FORESTRY, AGRICULTURAL SCIENCES and LANDSCAPE PLANNING.
Information science.
Informationslära.
Natural Sciences.
Naturvetenskap.
Other Computer and Information Science.
SKOGS- och JORDBRUKSVETENSKAP samt LANDSKAPSPLANERING.
PERSONAL NAME - PRIMARY RESPONSIBILITY
Hagström, Åsa,1975-
PERSONAL NAME - ALTERNATIVE RESPONSIBILITY
Forchheimer, Robert.
Ingemarsson, Ingemar.
Kvarnström, Håkan.
CORPORATE BODY NAME - ALTERNATIVE RESPONSIBILITY
Linköpings universitet, Institutionen för systemteknik.
Linköpings universitet, Tekniska högskolan.
ORIGINATING SOURCE
Date of Transaction
20201207200312.0
ELECTRONIC LOCATION AND ACCESS
Electronic name
مطالعه متن کتاب [Book]
Y
