新型PKI模型X-PKI的研究

Research of new PKI module X-PKI

针对传统公共密钥基础设施PKI存在的若干缺陷,为提高电子政务、电子商务的信息安全及满足其特殊安全需求,基于W3C制定的XML安全规范,提出了一种基于XML与PKI的X-PKI模型,讨论了其安全机制、总体框架、部署结构及技术要点,并初步应用于实际的电子政务系统中,较好地解决了PKI之间的互操作、数字证书管理的复杂性、服务透明性等问题,实现了细粒度的复杂加密/签名。

According to XML safety regulations established by W3C, a X-PKI model which combines PKI with XML technology was put forward. This model has been used in practical E-government system, and it has solved interoperation, flexibility of digital certificate management and transparency of services between PKIs better. This model could promote safety level orE-government and E-business, make up some weaknesses of traditional PKI and digital certificate and fulfill some special safety requirements. Additionally, the model＇s safe mechanism, general frame, deployment structure and technical key-points etc were discussed.