Smart card based PKI Signing Products
Business Requirement
Greatly expedite business transactions using smart-card based digital signatures on popular document types using PKI (Public Key Infrastructure) . Allow documents like Microsoft Word and Adobe PDF to be signed by multiple parties and signature verified. This also means checking for certificate revocation by implementing the OCSP protocol (Online Certificate Status Protocol).
Our Role
We assisted with product visualization including its capabilities and feature sets, did the complete system study, architecture and the implementations.
Solution
On the client end we worked with cryptographic smart cards and created signing, verification and X.509 certificate processing DLLs for Windows, using PKCS libraries, Microsoft CAPI and RSA BSAFE. These were used by plug-ins we wrote for Microsoft Word and Adobe Acrobat sensitive to the complex document formats. The client side also implemented the OCSP protocol over SSL, using ASN.1 encoding/decoding, and talked to the Certificate Authority’s secure servers. Signed OCSP responses were stored within the documents for future use.
On the server end, we worked with secure servers of the Certificate Authority, used Xcert Sentry certificate servers and implemented the OCSP server to work with the secure certificate repository. We used the Xparse language and the Xuda XDK for this purpose.
The first product version was released in 3 months time.