基于Web服务的证书验证服务模型的设计与实现

Design and Implementation Based on Web-Service Certificate Validation Service Model

目前在PKI应用中,存在对计算能力和通信能力受限的客户端的支持不够及PKI应用的不兼容等制约PKI发展的问题。为了解决上述两个问题,文中提出了一种基于Web服务的独立证书验证服务模型。该模型将繁重的证书验证计算从证书用户端剥离,有效地降低了对证书用户的计算和通信能力的要求。该模型采用了与平台无关的特性Web服务技术,适应多种PKI应用平台,同时为解决了不同PKI应用的互操作问题提出较为完整的实现方案。

There exist several problems that hinder the application of PKI, such as the weak ability to support computing and communicating capacity limited clients, and the interoperability among different PKI applications. To solve these two problems, this paper presents a Web-service based certificate independent validation service model. This model separates the heavy computing task of certificate validation from the client, thus reducing the requirement of computing and communicating capabilities of the client. Using the platform-independent technology, Web service, the model can be applied to many kinds of PKI application platform. The paper also presents a complete solution to interoperability among different PKI application.