xkms

• Implement xkms such that it is platform - , vendor - , and transport protocol - neutral
  实现xkms ，使其平台无关、供应商无关和传输协议无关。
• The private key is kept with the xkms service in case the client loses its private key
  在客户机丢失了私钥的情况下，私钥就与xkms服务保持一致。
• In rest of this article , i will demonstrate how xkms provides an answer to this problem
  在本文的其余部分，我将演示xkms如何为这个问题提供答案。
• Now , xkms provides an easy mechanism for using and integrating pki with applications
  现在， xkms为使用pki和将pki与应用程序集成提供了一种容易的机制。
• This part of the xkms deals with the mechanism for registering a key pair with a service provider
  Xkms的这一部分为将密钥对注册到服务提供程序提供机制。
• Ensure that the reply that xkms service sends for a request is not captured by an unauthorized third party
  确保xkms服务为某请求发送的回复不被未经授权的第三方捕获到。
• For example , an x . 509 certificate that s bound to an xkms key is destroyed when this operation is called
  例如，当调用这个操作时，绑定到一个xkms密钥的x . 509凭证将被销毁。
• The xkrss service specification does not make it mandatory for the xkms service to implement any of the operations
  Xkrss服务规范并不强制要求xkms服务实现上述任何一种操作。
• This part of xkms addresses the mechanism that allows client applications to authenticate encrypted signed data
  Xkms的这一部分为允许客户机应用程序认证经过加密/签名的数据提供机制。
• The trusted third party hosts the xkms service while providing a pki interface to the client applications
  这个受信任的第三方在提供一个到客户机应用程序的pki接口的同时驻留了xkms服务。