基于PKI的安全系统及其基于XML技术改进的研究  

Research on PKI-based Security System and Its Improvement based on XML Technology

作　　者：魏兵海[1,2] 

机构地区：[1]华中科技大学计算机科学与技术学院 [2]信息存储系统教育部重点实验室,武汉430074

出　　处：《计算机工程与应用》2005年第2期109-111,183,共4页Computer Engineering and Applications

基　　金：华中科技大学博士后基金项目:基于Globus/Webservics的高性能CFD计算网格研究(编号:AA183107)

摘　　要：公钥基础设施PKI是现代网络信息安全领域中的一门新兴主流安全技术。该文分析了基于PKIS规范设计实现的一个PKI安全系统,给出了系统架构和工作流程细节,剖析了系统的局限性。随后介绍了近年新出现的XML安全规范与技术:XML-ENC、XML-SIG、XKMS,基于异构互操作XML安全技术,给出了一个改进的PKI安全系统,即通过增加一个Web服务-可信任服务中间层来分离客户端密钥管理负载,并屏蔽底层异构PKI的复杂性,详细论述了改进新安全系统的优越特性。Public Key Infrastructure-PKI has become a newly emerging mainstream security technology in the area of modern internet information security.Based on PKIS,a PKI-based security system is designed and implemented,the de-tailed presentation contains system architecture,work flow and analysis on the disadvantage.Then,some new XML secu-rity specifications and technologies:XMI-Enc,XML-SIG,XKMS are introduced,based on these heterogeneous interopera-ble XML technologies,the former PKI-based security system is improved,by inserting a Web service-trust service tier,the load of key management are separated from client end and the underlying heterogeneous PKI complexity can be shielded.Also the advantages of the new architecture are described in detail

关 键 词：PKI XML-ENC XML-SIG XKMS 改进的安全系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]