Hermes消息安全的研究和改进

Study and modification on Hermes message security

为了保证电子商务活动过程中数据的安全性,分析了ebXML消息服务的结构,针对Hermes平台的安全问题,采用XML加密技术,改进了原系统的服务器模块的消息安全处理过程。使用了ECC和AES混合加密的算法,利用DES对原文加密,ECC管理密钥,并通过Java2编程予以实现。研究结果表明,该方法弥补了原系统的安全缺陷,可以在电子商务系统中实现安全的数据交换。

Aiming at guaranteeing the security of data in electrical business transaction, the strudure of ebXML messaging service was analyzed. In order to solve the problem of Hermes message security, a new scheme based on XML security algorithm was presented to improve the message processing trocedure of the old server module, and it was implemented with a hybrid cryptosys- tem based on ECC and AES which combined their advantages, DES was used to encrypt original document and ECC was used to manage key, Java 2 programming was used to realize it. The experimental results show that the modified platform fixes the defects of original, and can be used in electrical business system.