Research And Implementation Of The PKI On WEB

With the rapid development of Information technology and the popularity of network technology, organs at all levels has build the Electric document to improve the efficiency of service and information resource sharing .At present , the Electric document is base on Web way under the internet. It has become necessary and urgent to solve network security problem . Public Key Infrastructure (PKI) is the main way to sove the problem, which becomes the base foundation for security services by applying the public key concept. The PKI is a kind of key management media abided by standard and it fulfills the fundamental key and certificates requirements such as encryption and digital signature. But it still has some drawbacks in technique, such as bad interoperation between different systems and difficult deployment in client applications, etc. The complexity of PKI hinders its large-scale applications.XKMS is one of the XML security standards that published by W3C. It provides a general purpose interface to use PKI, makes server do the complicated PKI tasks of instead of by the client. It can solve the inter-operation Problem and reduce the complexity of client application. This system uses Web Service to provide XKMS service to transfer the complexity from client to server, and shields the process of underlying PKI. XKMS serve adopts synchronous processing mode, using SSL protocol to insure the security of message : rarsmission, employs two-phase request protocol to protect against denial of service attack.It is used to make the program over the net interact with each other fluently.Base on the study of XKMSU Web Service and PKI , and the advantage of XKMS and WebService , I give a solution which combine the PKI with them to implement the PKI and propose a grade cache encryption mechanism to solute safety problem that plaintext data in transmission cache of the traditional PKI.