Security company Verisign, software vendor Microsoft and business-to-business integration software house webMethods introduced the XML key management specification (XKMS) framework yesterday.
Based on XML, the specification is expected to allow integration between various PKI vendors` toolkits, as well as e-commerce applications based on the standard.
XKMS will be submitted to the appropriate Web standards bodies for consideration as an open Internet standard, and will be built into the Microsoft.NET architecture.
XKMS will provide a complete framework for application interoperability when combined with the recently drafted XML digital signature standards and the emerging XML encryption standard, according to the three vendors. XKMS is also compatible with the emerging standards for Web Services Description Language and Simple Object Access Protocol.
"For the next generation of e-commerce applications to truly support high-value transactions, the handling of digital keys for online authentication, digital signatures and data encryption must be simple to integrate and must interoperate across a broad range of enterprise applications," says Warwick Ford, chief technology officer for Verisign.
Functions such as digital certificate processing, revocation status checking, and certification path location and validation are built into the application via the toolkit and reside server-side, rather than in the application itself.
The specification for XKMS and a white paper are available at http://www.verisign.com/developer/xml/.
Share
