A METHOD AND A SYSTEM FOR CERTIFICATE REVOCATION LIST CONSOLIDATION AND ACCESS

摘要

This invention discloses a system for certificate revocation list (CRL) consolidation and access, comprising: a plurality of certificate authorities (CAs); a pluralit y of CRL retrieval agents associated with CRL distribution mechanisms of CAs, for consolidating the CR Ls from multiple CAs; CRL databases, for storing the consolidated CRLs from multiple CRL retrieval agents and the replication of CRLs; and CRL access API. Therefore, application can acce ss the nearest CRL database to determine whether a digital certificate has been revoked via a s et of unified APIs without bothering the detailed of CRL distribution mechanisms. In addition, the system of the invention is also adapted for consolidating and accessing all kinds of black list.