基于XKMS的电子商务系统安全应用模型方法研究  

Security Application Model of e-Commerce System based on XKMS

作　　者：王绍刚[1] 刘海法[1] 王申[1] WANG Shao-gang LIU Hai-fa WANG Shen(Technology Research Institute, Aisino Corporation, Beijing 100195, China)

机构地区：[1]航天信息股份有限公司技术研究院,北京100195

出　　处：《通信技术》2017年第1期162-165,共4页Communications Technology

摘　　要：详细论述XKMS密钥管理规范方法,深入研究和分析XKMS技术规范的细节,在利用XML可扩展标记语言(EXtensible Markup Language)、密钥管理规范(XKMS)及其相关技术的基础上,结合电子商务系统安全相关特性,设计了电子商务系统安全应用模型流程方法。该模型利用XML特性来描述密钥数字证书的相关信息,以通过XKMS处理密钥信息,从而降低PKI客户端的操作复杂性,使电子商务系统具有较好的安全可维护性和可扩展性。此外,该模型方法可增强电子商务系统在Web服务中的安全性,从而可更好地将XKMS密钥管理规范转化为实际应用。XKMS key management specification method is discussed in detail, and in-depth study and analysis of XKMS specification details als done. By using XML extensible markup language（Extensible Markup Language）, based on key management specification（XKMS） and its related technology and in combination with e-commerce system security-related characteristics, the security application model process of e-commerce system is designed. In this model process, XML is used to describe the related information of key digital certificate, so as for XKMS to process key information and reduce the operation complexity of PKI client, and this could make the electronic commerce system process good safety, maintainability and scalability. In addition, the model could enhance the safety of e-commerce system in the Web service, thus to transform XKMS key management specification into practical application.

关 键 词：XKMS 密钥管理 WEB服务 XML 安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]