Research And Implementation Of XML-based Mobile Key Management Platform

WKMP is designed to simplify the integration of PKI and digital certificates (which are used for securing Internet transactions) with XML applications. WKMP gives a new architecture for the key management solution in the mobile application. With WKMP, trust functions reside in servers accessible via easily programmed XML transactions. Developers can enable applications to delegate all or part of XML digital signature processing to WKMP-compliant Web services, minimizing the complexity of the underlying PKI. WKMP borrows the best of PKI without reducing scalability or security. WKMP creates a trust service that shields clients from complexity by providing an XML interface to PKI. WKMP integrates various PKI protocols and data formats into one single XML-based protocol, such as Certificate Revocation Lists, Online Certificate Status Protocol, Lightweight Directory Access Protocol, Certificate Management Protocol and Simple Certificate Enrollment Protocol. The WKMP protocol provides three fundamental operations: key locating, which retrieves a cryptographic key so that it can communicate securely with another entity; key validating, which guarantees the key to be active and has not been revoked; and key registering, which issues, reissues and revokes keys.WKMP engages SOAP to carry the messages between client and server. And the communication between server and underlying PKI obeys the standard PKI protocol.WKMP system has a good expansibility and security, and the development of applications WKMP-based is easy and efficient.