基于XML新型数字证书在PKI中的实现

本文提出了用XML作为数字证书的表现形式问题。当前PKI系统主要应该解决的问题就是互操作问题和在PKI系统中引入信任评价标准。XML作为一种网络的标准数据交换格式，既可以简化互操作问题，也可以直接利用XML的相关协议实现数字证书的交换。客户端也有广泛的XML的处理器对证书进行操作。通过采用XML技术，可以对普通用户屏蔽PKI的复杂性，实现了对具体的PKI厂商产品和实现技术的松耦合，有利于解决PKI的互操作问题。

A New-Type Digital Certificate based on XML

This paper raises an issue that the digital certificate can be represented in the form of XML. There are two fundamental issues of PKI must be solved： one is the interoperability, the other is trust evaluation criterion. XML works as an exchange format for normative data in network; not only can it simplify mutual operation, but also achieve the commutation of digital certificate by using the relational agreement of XML directly. Clients can take advantage of many automated tools to create and handle XML-based certificates. By using XML technology, the general users could be shielded from the complexity of PKI. Users don＇t need to tightly combine to special PKI products and technologies.