PKI System Application Integration Research Based On Publish/Subscribe

Traditional PKI system due to the reasons of structural design has a high degree of couplingbetween components, which is not conducive to the expansion of the system and integration withother systems, resulting in poor interoperability between the components. When the PKI systemupgrades and expands the problem becomes more prominent. System integration as systemsengineering’s method and technique can effectively solve the problems of interconnection andinteroperability between systems, which can integrate each separate subsystems, functions, andinformation into an interrelated, unified and coordinated system. Application integration as alevel of system integration can achieve the interoperability between the applications, theportability of applications in a distributed environment, as well as the transparent distribution ofapplications. In this paper, to issue the interoperability between the PKI system components,system integration ideology, method and technique are introduced to PKI system, whichintegrates the various components in PKI system as application systems at the level ofapplication integration. We design and implement an efficient, stable and scalablecommunication and integration platform for the PKI system, effectively increasing theinteroperability between the components. The main contributions are as follows:Firstly, a PKI system application integration scheme based on publish/subscribe and anapplication integration model are put forward. To overcome the problems of high coupling ofbusiness interaction and communication between the traditional PKI system components and theunextendable structure, we put forward a application integration scheme which usesmessage-oriented middleware as integration mode and entity associated with each other by thepublish/subscribe pattern. The application integration scheme is based on the comprehensiveanalysis of interactive relation between the components in PKI system and the appropriatetechnology selection according to the communication mode, access mode, the integrationtechnology and non functional requirement four basic technical modules, using the ideology andmethod of system engineering. According to the design of application integration scheme, we putforward a distributed application integration model of network topology and logical functionstructure, which provides a flexible, scalable integration and communication platform for thePKI system.Secondly, we design the service-oriented architecture in the application integration model.To overcome the problems of the the lack of basic position and function information and unifiedmanagement, which is caused by the distributed architecture and middleware integration mode,we introduce the service-oriented architecture to achieve the components function detection and management. On the basis of the study of service-oriented architecture using Web services,according to the characteristics of PKI system, we put forward the integrated system servicedescription method and registration mechanism. Combined with the message-orientedmiddleware and publish/subscribe model we design and implement a service call method basedon push mode, which has the high timeliness of the information and reduces the Network burden.Thirdly, we design the message structure and message secure transmission mechanism in theapplication integration model. We design the message types and structure based on functionalneeds of the integration model. To satisfy the security needs of application integration scheme,we propose the secure message transmission mechanism based on the digital envelopetechnology, which is flexible, safe and can reduce the identity authentication number between thecommunication entities.At last, we implement and verify key entities of the application integration model. Theapplication integration model architecture and related technologies as the foundation, we designthe structure of integration management system and integration interfaces and realize thefunction modules of them. Finally, we verify the function of the integration and communicationplatform constituted by integration management system, integration interfaces andmessage-oriented middleware.