Research & Design Of The XML Key Management System

With the development of Internet and occurrences of many kinds of network applications, the research of security problem is deepened more and more, especially Web services based on XML technology gradually ripe and deploy application in recent years, the traditional security solution hasn't met new security needs, the security problem has already become one of the main obstacles that prevent web services from using on a large scale.PKI (Public Key Infrastructure) is the leading solution to ensure the security in networks and the foundation for the instruction of network security. It ensures the security of implementation of e-Government and e-Business. But it still has some drawbacks in technique, such as bad interoperation between different PKI systems and difficult deployment in client applications, etc. These drawbacks limit the PKI from wide usage.XML is a marked language used by many people, It has good extensions and feasible than HTML. XKMS provide a convenient mechanism of integration and access the PKI, it makes the electronic authentication function embedded in servers, makes the information authority on xml pattern possible.The thesis first introduces the technology of information security, next introduces the extensible markup language and its security technology, including XML-Enc and XML-Sig, and then analyses its syntax, process, restriction and security. The XKMS Specification was then researched and analyzed in detail. The Thesis expounds the idea, ingredients and functions of XKMS in details. The content which isn't illustrated definitely in the XKMS Specification is analyzed and discussed in depths. In addition, the advantage of XKMS is summarized.According to the above, the thesis implement an XKMS system conformed to XKMS2.0, which is easy to use, easy to maintain, easy to extend. And the performance of this system is analyzed. The thesis describes the detail of XKMS system construction, function of everyone, management of keys/certificates and XKMS messages, At last, the main services of the system are discussed, and the resolve method is provided.