Research And Implementation Of CA System Based On Web Services

Public Key Infrastructure(PKI) is a technology to solve issue of opening network security by using public key cryptography theory. Certificate Authority(CA) is the core of PKI . CA research is quite already mature in the technical aspect. But there are also problems ,such as the complexity of system architecture,the poor scalability,reusability and compatibility between different program implementation,and how to communicate easily with external systems on different platforms. Web Services is a key to the issues of CA system. Since the adoption of XML and other platform-independent and neutral technology,and a set of standardized methods to describe,publish,discover and call services,issues of the distributed applications'isomerism and cross-platform can be solved. To take Web services as a basic unit of function modules can make the system has better compatibility,scalability and code reusability. In this paper, the subject is the use of Web Services technology to improve the traditional CA systems, detail as follows:1. Study CA technologies and Web Services technologies. Analysis of the traditional CA inadequacies, discuse using the cross-platform and cross-language features of Web Services to achieve an open CA system, and overcome the shortcomings of traditional CA systems, and enable them to provide network services for system on different platforms conveniently, while enhancing system's scalability, reusability to make the system more practical.2. Design the WebServices-based CA system multi-layer work model, and use JavaEE technology platform and security technologies packet provided by open source PKI project Bouncy Castle to implementate a instance of WebServices-based CA system.3. Base on the CA service interface definition in literature, research the specific methods of development and deployment of Web Services using JAX-WS2.0 technology in NetbeansIDE , and discusse some of Web services and client implementation process in detail.