如何使用智能卡在Web应用程序（JavaScript）中进行数字签名？ [英] How to make a digital signature in a web application (JavaScript) using a smartcard?

问题描述

我们已经编写了文档管理系统，并希望使用Web客户端对文档进行数字签名。我们的Java客户端应用程序已经能够应用和检查数字签名，但是即使我们使用Web客户端，我们也希望进行签名。这是用GWT编写的，因此，当在客户端运行时，它是一个JavaScript应用程序。

We have written a document management system and would like to digitally sign documents using the web client. Our Java client application is already able to apply and check digital signature, but we would like to make signature even with our web client. This is written in GWT and so, when run on the client side, it is a JavaScript application.

我们不想创建Java小程序并将其下载到客户端上并执行它。我们想使用浏览器安全设备或浏览器API来签署文档。我们还希望保留完整的文档服务器端，而仅将文档哈希移到客户端。

We not want to create a Java applet and download it on the client and execute it. We would like to use the browser security device or the browser API in order to sign a document. We would also like to keep the complete document server side, and move to the client only the document hash.

我们认为使用 NSS应该可以做到这一点或 npapi / npruntime ，但我们没有找到任何有关此的信息。 （顺便说一句，npruntime也可以在IE中使用吗？我们应该使用ActiveX在IE中实现相同的结果吗？）

We feel this should be possible using NSS or npapi/npruntime, but we did not find any information about this. (By the way, is npruntime available also in IE? Should we use ActiveX for achieving the same result with IE?)

您有任何提示吗？

推荐答案

经过更多的谷歌搜索后，我找到了答案。 Mozilla通过 window.crypto 对象导出其NSS模块的一部分。进行此操作的更标准方法可能是通过 DOMCrypt 在W3C中进行讨论。
Google Chrome开发人员将等待W3C标准化DOMCrypt，而Microsoft要求使用ActiveX对象如此处所述（即使在Windows上的Firefox / Chrome / Opera中也可以使用）。

After some more googling I found the answer. Mozilla export part of its NSS module via window.crypto object. A more standard way of doing such operation is probably via DOMCrypt, that is currently discusses in W3C. Google Chrome developer will wait W3C to standardize DOMCrypt, while Microsoft require the use of an ActiveX object as explained here (this works even with Firefox/Chrome/Opera on Windows).

这篇关于如何使用智能卡在Web应用程序（JavaScript）中进行数字签名？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！