The Desigen And Implementation Of Key Certificate Management System Based On XKMS

In despite of PKI has resolving many security problems in web application, it has still some shortcomings in technic, such as bad inter-operation of different systems, difficult deploying of applications and much spending of system maintenance, etc. In fact, PKI push all trusted decisions to users completely, so client must deploy complicated program libraries. As a result, it's very difficult to apply PKI.This paper studies and analyzes XML Key Management Specification (XKMS), on the basis of this, aiming at security demands of OAS of zhengzhou science and technology bureau, designs and implenments key certification management system which is basied on XKMS. This system takes full advantage of XKMS's characteristics, uses XML to describe key certification information, makes up the way of dealing with XKMS message between client and PKI provider. By this way, it can transfer the complicated PKI management from client to trusted server, who specialises PKI management, and shielding the implementation process from PKI bottom.This system is flexible, extensible and easily distributing, so it can expediently provide key certification management services for security technic, meet security demands of distributed web applications based on XML, offer good conditions for implementing security technologies of OAS of zhengzhou science and technology bureau.