XML数据安全传输方案的研究和实现

Research and Implement of the Scheme for XML Data Secure Transmission

分析XML数据存在的安全隐患,提出了一个更安全的XML数据传输方案,并使用.NET技术加以实现和验证。该方案在实现XML加密、XML数字签名和XKMS等核心标准来解决XML数据安全问题的基础上,利用XSLT2.0技术对XML文档进行分解,并根据信息的保密等级,使用不同的XML签名和加密算法对分离后的XML文档进行安全处理。该方案提高了XML数据在非安全网络中传输的保密性、完整性和不可否认性,具有良好的灵活性和发展前景。

Analyzes the potential security danger of XML data and puts forward a more secure scheme for XML data transmission and uses .NET technology to realize and check it. Based on solving the security problem of XML data, through realizing the core standards, such as XML encrypt, XML signature, XKMS etc, this scheme disassembles XML documents with XSLT 2.0 technology. According to the level of data encrypt, the scheme deals with the disassem- bled documents with different XLM signatures and encryption algorithms secure as well. This scheme develops XML data＇s encryption, integrality and irrefutability, so it has a good flexibility and developing foreground.