| With the rapid development of the Internet,e-commerce as a product of the combination of the computer network and business is changing people's lifestyle. However, because of the openness and anonymity of the Internet, the existence of various security risks is unavoidable; all kinds of hacker programs are serious threat to the security of online transaction.PKI as a public key infrastructure is an effective solution to the security issues of the transmission of information in e-commerce. It is an infrastructure providing security services which is built on the basis of the theory of public key and technology. It is also a password key and certificate management system providing encryption and digital signature services for all network applications. With the strong PKI security system support, e-commerce security problems can be effectively resolved.But there are a lot of deficiencies in the application process of traditional PKI. PKI is a distributed system with a lot of clients. Different clients often adopt different standards, thus the traditional PKI implementation will be very difficult, and high maintenance costs. Different PKI systems are difficult to achieve cooperation and communication.The Web Services technology as an XML-based language and standard network protocols to achieve distributed computing technology, in essence, is a self-contained, modular application. It can be described published searched and called in the network, it is full of advantages such as open, scalable and platform-independent, but the security of Web Services mechanisms exist certain shortcomings.The content of this paper is on the basis of the present study in the Web Services and the PKI technology and application status. It makes a comprehensive analysis of the advantages and short comings of Web Services and PKI, and takes the proposal of building a Web Services-based PKI security system, and makes a further research on the feasibility and the great significance of this system. Then it makes an initial establishment of Web Services-based PKI security system structure model, verifies the feasibility of the implementation of security system. Finally it expatiates the design and realization of this security system applied in the HISTEP comprehensive management information platform. Moreover, it points out the practical value of application of this security system in electronic business. |