LOCAL DISTRIBUTED CA SYSTEM BASED ON LOCAL PKI

摘要

A local distributed CA system based on a local PKI(Public Key Infrastructure) is provided to reduce a certificate updating cost and shorten a certificate signature verification time and a certificate validation verification time by a Cert_List table. A local distributed CA system based on a local PKI includes a public key/private key creating unit, a certificate issuing unit, and a Cert_List table information updating unit. The public key/private key creating unit creates a public key or a private key by creating a public key or a private key of a user who applies to a certificate. The certificate issuing unit creates the certificate according to a user's request to issue the certificate for the user. The Cert_List table information updating unit updates Cert_List table information while recording discarded certification information in a certificate discard date item by searching for a certificate of the Cert_List table. The local distributed CA system further includes a user, a local CA, and a directory server. The directory server is a place for storing and searching for the certificate and user information, and a pair of cross certificates and CRL. The directory server is controlled by the local CA.