| 摘要 |
<p>An online certificate status checking protocol (OCSP) system is provided. An end device can provide an OCSP request based on a certificate and process an OCSP response. The OCSP system includes an OCSP responder, and OCSP proxy and a cache. The OCSP responder can provide the OCSP response. The OCSP proxy can receive the OCSP request from the end device, can send the OCSP request to the OCSP responder, can receive the OCSP response from the OCSP responder and can send the OCSP response to the end device. The response has a validity period. The OCSP proxy can further store, in the cache, information based on the OCSP response and can send a proactive OCSP request to the OCSP responder based on a predetermined policy, e.g. when a response has expired or is about to expire. The OCSP proxy can further update the information in the cache based on the proactive OCSP response.</p> |
