Versions Compared

Old Version 3

changes.mady.by.user IT Global

Saved on

compared with

New Version Current

changes.mady.by.user IT Global

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

The Web-client of the NSD Repository is a web-application (browser application). For its full operations several external components are required. Such components are related to data encryption and a digital signature.

System Requirements

Proper functioning of the Web-client requires components, which are external in relation to web-browser software. This is due to the encryption of the transferred data and it's signing with digital signature. Table 1 lists the minimum computer requirements to run the Web-client successfully.

Table 1 – Technical requirements

...

Windows 7
Windows 8
Performance on Windows XP cannot be guaranteed due to the restrictions on the use of the TLS-tunnel

...

Internet Explorer version 9.0 and above. Version 8.0 is not currently supported officially, the system is being tested
Firefox version 20.0 and higher
Google Chrome version 20.0 and higher

...

Section
Column

HTTPS tunnel, authorization and encryption

The picture below shows a general scheme of interconnection between a client and the web-server.

...

Image Removed

...

 When a client connects to the server

...

a https tunnel is set up on the basis of the server and client certificates, i.e. with bilateral authorisation. This is a first level of client authorization in the system.

...

 Then a user

...

enters a login and a

...

password in the authorisation form to get an access directly to the web-application.

Column
width400px
Panel
bgColor#F5F5F5
borderStyledotted

On this page:

Table of Contents

Further information:

Image Added

Fig. 1 – interaction between client and Web-server

Channel forming

Depending on the type of the certificate  (RSA or GOST

...

), https tunnel is set up using the cryptographic service provider Microsoft CSP or Validata CSP, respectively (Fig 2). Also, depending on the certificate type the client space puts a digital signature and encrypts documents with a CSP.

Image Removed

Client software

For the application to operate the client workstation should have the following software:

  • Compatible browser 

  • Java

  • Certificate directory

  • CSP

Moew details are given below.

Image RemovedSoftware is interconnected (in general and not only with the Web-client) with CSP indirectly through API provided by the Certificate Directory that is also used to manage user certificates inlcluding their placing in the systemic certificate storage. 

Software installation

To ensure interconnection as described above a user should take the following actions depending on the CSP before launching the Web-client.

Tip

If qualified certificates (GOST) used:

...

If non-qualified certificates (RSA) used:

...

Image Added

Fig. 2 –  forming a channel