This paper presents a new certificate revocation schem e based on CRL and OCSP policies in PKI.

• 提出了一个基于CRL和OCSP策略的新的证书撤销方案。