...
...
HTTPS tunnel, authorization and encryptionThe picture below shows a general scheme of interconnection between a client and the web-server. When a client connects to the server |
|
...
a https tunnel is set up on the basis of the server and client certificates, i.e. with bilateral authorisation. This is a first level of client authorization in the system. Then a user |
|
...
...
password in the authorisation form to get an access directly to the web-application. |
|
Image Removed
...
| Column |
|---|
| | Panel |
|---|
| bgColor | #F5F5F5 |
|---|
| borderStyle | dotted |
|---|
| On this page: Further information: |
|
|
Image Added
Fig. 1 – interaction between client and Web-server
Depending on the type of the certificate (RSA or GOST), https tunnel is set up using the cryptographic service provider Microsoft CSP or Validata CSP, respectively (Fig 2). Also, depending on the certificate type the client space puts a digital signature and encrypts documents with a CSP.
Image Removed
Image Added
Fig. 2 – forming a channel
...