Chrome中电子智能卡的数字签名 [英] Digital signature from electronic smartcard in Chrome

问题描述

对于一个在浏览器上运行并且需要专业人员进行个人签名的电子处方系统，我们使用Java applet来签署XML请求，然后使用智能卡将其发送给WS。

但自从版本42开始， Chrome默认禁用NPAPI支持，并且在2015年9月之后的将来版本中，它将被完全禁用，然后小程序根本无法使用。

在Chrome NPAPI弃用页面指向 WebCrypto 和TLS作为替代方案。
但似乎WebCrypto 已超出范围 a>智能卡的支持，而且TLS似乎只是关于加密协议，并没有提供使用电子卡的方式。

有人使用了完全采用浏览器原生解决方案来签署文件，并对流程有很好的控制。至少它是必须的：

• 没有用户签名的XML请求的确认和可视化。因为签名是对用户没有任何价值的内部技术请求，并且该应用程序运行在内部LAN中受控和可信的系统中。 我们面临同样的问题，想出了一个解决方案（本地消息传递，是的）
  
  

  https://github.com/open-eid/chrome-token-signing

  
  

  For an electronic prescription system, that runs on the browser and that requieres personal signature by the professional, we are using a Java applet to sign the XML request, that then is sended to a WS, using a smartcard.

  But since version 42, Chrome is disabling by default NPAPI support, and in future versions next to September 2015 it will be completely disabled and then applets won't be usable at all.

  At Chrome NPAPI deprecation page points to WebCrypto and TLS as alternatives. But it seems that WebCrypto has leaved out of scope the support of smartcards , and it seems that TLS is only about cryptographic protocols and it doesn't provides a way to use an electronic cards.

  Has someone used a completely browser native solution to sign documents and have a good control of the process. At least it will be nedeed:

  • No confirmations and no visualitzation of the XML request that is signed by the user. Because what is signed is an internal technical request that has no value to the user, and the application runs in a controlled and trusted system in internal LAN.

  解决方案

  We faced the same problem, came up with a solution (native messaging, yes)

  https://github.com/open-eid/chrome-token-signing

  这篇关于Chrome中电子智能卡的数字签名的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！