One method is periodically issuing certificate status, based on traditional CRL(Certificate Revocation List) issuing mechanism this paper also introduces segment CRL, increment CRL, over-issued CRL, CRT etc.

• 一是周期发布证书状态方式，在传统的证书撤销列表(Certificate Revocation List, CRL) 发布机制的基础上又介绍了分段CRL、增量CRL、重叠发布的CRL、证书撤销树，这些不同的证书撤销方式在一定程度上避免了恶意攻击；