3部分：節(jié)點(diǎn)驗(yàn)證服務(wù)Regionalhealthinformationplatforminteractivestandard—Part3:NodeauthenticationserviceWS/T790.3—WS/TWS/T790.3—3部分：節(jié)點(diǎn)驗(yàn)證服務(wù)ITU-TX.509(03/00)信息技術(shù)-開(kāi)放系統(tǒng)互聯(lián)-ISO/ITU-TASN.1抽象語(yǔ)法標(biāo)記（AbstractSyntaxNotationOne）WS/T448基于居民健康檔案的區(qū)域衛(wèi)生信息平臺(tái)技術(shù)規(guī)范WS/T482WS/T448、WS/T482SecurityAccessDICOM：醫(yī)學(xué)數(shù)字影像和通訊（DigitalImagingandCommunicationsinMedicine）HTTP：超文本傳輸協(xié)議（HyperTextTransferProtocol）HL7：衛(wèi)生信息第7層協(xié)議（HealthLevelSeven）NA：節(jié)點(diǎn)驗(yàn)證（NodeAuthentication）NAS：節(jié)點(diǎn)驗(yàn)證服務(wù)器(NodeAuthenticationServer)SN：安全節(jié)點(diǎn)（SecurityNode）IST-NA1

IST-NA2圖1 節(jié)點(diǎn)驗(yàn)證服務(wù)器IST-IST-安全節(jié)點(diǎn)IST-IST-驗(yàn)證節(jié)點(diǎn)的用例見(jiàn)圖2圖2節(jié)點(diǎn)驗(yàn)證結(jié)果圖3表2OID表3ITU-TX.509(03/00)C.1訪問(wèn)權(quán)限管理的用例見(jiàn)圖4 訪問(wèn)權(quán)限驗(yàn)證用例 訪問(wèn)權(quán)限驗(yàn)證用例4節(jié)點(diǎn)OID表 節(jié)點(diǎn)訪問(wèn)權(quán)限管理請(qǐng)求應(yīng)答的消息補(bǔ)充約節(jié)點(diǎn) 文件名:rhin_Authentication.wsdl<?xmlversion="1.0"encoding="UTF-<!--Ver.0.12.1/2018-03-22DejunHsu--<wsdl:definitionsxmlns:wsoap12="/wsdl/soap12/"xmlns:wsdl="/wsdl/"xmlns:xs="/2001/XMLSchema"xmlns:xsi="/2001/XMLSchema-instance"xmlns="/rhin/2015"xmlns:soapenc="/soap/encoding/"<wsdl:message<wsdl:partname="parameters"<wsdl:message<wsdl:partname="parameters"<wsdl:message<wsdl:partname="parameters"<wsdl:message<wsdl:portType<wsdl:operation<wsdl:inputname="NodeAuthenticate"<wsdl:portType<wsdl:operation<wsdl:inputname="ServiceAccessAuthenticate"<wsdl:bindingname="NodeAuthProviderBinding"<wsoap12:bindingstyle="document"<wsdl:operation<wsoap12:operation<wsoap12:operation<wsdl:input<wsoap12:body<wsdl:output<wsoap12:body<wsdl:bindingname="ServiceAccessAuthProviderBinding"<wsoap12:bindingstyle="document"<wsdl:operation<wsoap12:operation<wsdl:input<wsoap12:body<wsdl:output<wsoap12:body<wsdl:service<wsdl:portname="NodeAuthProviderImplPort"<wsoap12:address<wsdl:portname="ServiceAccessAuthProviderImplPort"<wsoap12:address （規(guī)范性節(jié)點(diǎn)驗(yàn)證服務(wù)消息格式采用XMLSchema定義如下：<?xmlversion="1.0"encoding="UTF-targetNamespace="/rhin/2015"elementFormDefault="qualified"><xs:elementname="NodeAuthenticate"<xs:documentation>節(jié)點(diǎn)認(rèn)證請(qǐng)求消息<xs:elementname="NodeAuthenticateResponse"<xs:documentation>節(jié)點(diǎn)認(rèn)證請(qǐng)求應(yīng)答消息<xs:elementname="ServiceAccessAuthenticate"<xs:documentation>訪問(wèn)權(quán)限認(rèn)證請(qǐng)求消息<xs:elementname="ServiceAccessAuthenticateResponse"<xs:documentation>訪問(wèn)權(quán)限認(rèn)證響應(yīng)消息<xs:elementname="id"type="OID"minOccurs="1"<xs:documentation>節(jié)點(diǎn)<xs:elementname="digestValue"type="Base64Binary"minOccurs="1"<xs:documentation><xs:documentation>消息摘要<xs:elementname="signatureValue"type="Base64Binary"minOccurs="1"<xs:documentation>消息摘要簽名<xs:elementname="id"type="OID"minOccurs="1"<xs:documentation>節(jié)點(diǎn)<xs:elementname="serviceName"type="String"minOccurs="1"<xs:documentation>訪問(wèn)的服務(wù)名稱(chēng) 證書(shū)采用X.509結(jié)構(gòu),采用ISO/ITU-TASN.1 BITSTRING——tbsCertificateTBSCertificate：表示證書(shū)基本域，TBSCertificate——signatureAlgorithmAlgorithmIdentifier：表示簽名算法，AlgorithmIdentifier——signatureValueBITSTRING：表示簽名值，BITSTRING類(lèi)型。表 簽名算法算法OID基于MD5的RSA基于SHA1的RSA國(guó)密SM2基于國(guó)密SM3的SM2基于SHA256的SM2基于SM3的RSA OBJECT ANYDEFINEDBYalgorithm——algorithmOBJECTIDENTIFIER——parametersANYDEFINEDBYalgorithmOPTIONAL EXPLICITVersionDEFAULTv1, issuerUniqueID[1]IMPLICITUniqueIdentifierOPTIONAL,subjectUniqueID[2]IMPLICITUniqueIdentifierOPTIONAL, [3]EXPLICITExtensionsOPTIONAL——version[0]EXPLICITVersionDEFAULTv1:0，表示版V1；——issuerName:表示證書(shū)發(fā)布者，Name——validityValidity,表示有效期，Validity——subjectName:表示證書(shū)主題，Name——subjectPublicKeyInfo,SubjectPublicKeyInfo：表示被綁定的證書(shū)持有者的公鑰信息，SubjectPublicKeyInfo——issuerUniqueID,IMPLICITUniqueIdentifierOPTIONAL:表示證書(shū)簽發(fā)者的唯一標(biāo)識(shí)，UniqueIdentifier——subjectUniqueID[2]IMPLICITUniqueIdentifierOPTIONAL：表示證書(shū)持有者的唯一標(biāo)識(shí)，UniqueIdentifier類(lèi)型；——extensions3]EXPLICITExtensionsOPTIONAL：表示擴(kuò)展信息，Extensions——INTEGER20RDNSequence::=SEQUENCEOFRelativeDistinguishedNameRelativeDistinguishedName::=SETOFAttributeTypeAndValue AttributeType, ——RDNSequenceRDN——typeAttributeType——valueAttributeValue(RelativeDistinguishedName)宜采用表C.2表 RDNRDNCommonOrganizationalUnitOrganization