Skip to main content

NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

A Model of Cerificate Revocation

Published

Author(s)

David A. Cooper

Abstract

This paper presents a model for the distribution of revocation information using certificate revocation lists (CRLs). This model is used to highlight inefficiencies in the traditional method of distribution certificate status information using CRLs. Two alternative CRL-based revocationdistribution mechanisms, over-issued CRLs and segmented CRLs, are then presented. The original model is then expanded to encompass each of the alternative mechanisms and these expanded models are used to demonstrate the advantages of the alternative mechanisms to the traditional method. Finally, the paper offers some suggestions for choosing the best CRL-based revocation distribution mechanism for any particular environment.
Proceedings Title
Fifteenth Annual Computer Security Applications Conference
Conference Dates
December 6-10, 1999
Conference Title
Computer Security Applications Conference

Keywords

certificate revocation, certificate revocation list, certification authority, CRL

Citation

Cooper, D. (1999), A Model of Cerificate Revocation, Fifteenth Annual Computer Security Applications Conference (Accessed October 13, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created December 1, 1999, Updated February 17, 2017
Was this page helpful?