Research Of Safe Data Exchange In Digital Certificate Center Based On XML And SPKM

With the development of internet technology as well as e-business,and e-government,the number of customers using security services provided by PKI has increased expponetially. This requires the deployment of the digital certificate at the center to have a better scalability and flexibility. To meet the new challenges, many more important problems emerged or remail opne, among which digital certificatication and secure data exchange between each department of the center are two key issues.This work attempts to study digital certification in the center of the development process and SPKM secure data exchange by using XML and SPKM. The contributions in this thesis include:1. The data exchange between the subsystems of a digital certification enter was analyzed. We also summarized the characteristics of data exchange between different subsystems in the exchange process and the requirement for security during the data exchange.2. Composition and technical features of the XML data exchange were analyzed. The star model for the XML-based data exchange was then proposed. An XML based Schema was defined for the exchange and transformation of the script mapping rules. Furthermore, both encoder and decoder are implemented with Microsoft Visual Studio 6.0.3. By analyzing the security agreement of SPKM, the data exchange processes and the authentication process of SPKM were studied. The SPKM token algorithm and various functions and the establishment of a process were also developed.In this paper, we proposed a new solution for data exchange in digital certification center. XML was used for data exchange between the various subsystems, which results in a better scalability and flexibility for the digital certification center. Data security was obtained through the use of SPKM agreement during data exchange.