【摘要】 针对XKMS安全规范应用的局限性,提出一种面向WebService的XKMS服务模型。该模型将XKMS规范与底层PKI解决方案相结合,构成一个开放的、模块化的体系结构,它通过一个Web服务接口实现不同PKI规范之间的集成。首先给出了该模型的体系结构并详细描述了各模块的功能和执行方法,接着描述了表示数字证书状态的数据结构以及XKMS与底层PKI系统之间进行通信的接口方法,最后用Java实现了所提出的XKMS服务模型的原型系统。实验分析表明,实现的XKMS系统具有良好的安全性能和执行效率。更多还原

【Abstract】 Due to the limitations of most applications based on XKMS security specification, a web service-toward XKMS model is proposed. This model integrates the XMKS specification and underlying PKI solutions to construct an open and modularized architecture, which takes advantages of a web interface to realize the integration of different PKI specifications. Firstly, the architecture of this model is presented and the functions and implemented methods is described in details. Next, the data structure representing the certificate status and the communication methods between XKMS and underline PKI solutions are presented. Finally, the prototype system of XKMS service module is developed using Java language. The experimental results and analysis demonstrate that the XKMS system has a good security quality and an efficient performance as well.更多还原