A Research on XML and XML-Related Security

Yao Lei,Zhang Xinjia,Zhang Huixiang

DOI: https://doi.org/10.3969/j.issn.1009-8054.2006.09.058

2006-01-01

Abstract:On the basis of the elementary knowledge of XML,the paper mainly discusses the security technology related to it,including XML encryption and XML signature,and implements XML encryption and XML signature based on PKI.

What problem does this paper attempt to address?

Research on security extensions based on Java 2 security architecture

TIAN Yu-hong,WANG Ze-bing,FENG Yan

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.24.029

2006-01-01

Abstract:The Java virtual machine(JVM)is used more frequently as the basic engine behind dynamic web services.With the proliferation of network attacks on these network resources,much work are done to provide security for the network environment.Little effort has been placed on securing a Java web server where the attacker has a valid login to the host machine.After describing the vulnerabilities in Java's security mechanisms,an extended security system based on Java 2 security architecture is introduced.It also explains the runtime status of system.The increased assurance of correct system operation and the integrity of Java application server are provided.
Research on the Tactics to Realize Information Exchange and Se-curity Based on XML

王勇,王骏,黄杰,陈幼平,周祖德

DOI: https://doi.org/10.3969/j.issn.1001-2257.2004.06.002

2004-01-01

Abstract:Based on the analysis of the problems of the exchange of informations of virtual enterprises, in this paper,the realization of information exchange and security of virtual enterprises is discussed and the design of DTD of XML documents and the technology of XML encryption are specified.furthermore,an example is taken to illustrate how to exchange the information of virtual enterprises.
Research of XML Engine Security Model on Web Services

张艳,周明天,佘堃

DOI: https://doi.org/10.3969/j.issn.1001-3695.2008.07.074

2008-01-01

Abstract:Web services provide interface access to the software.And the interface realizes the calls of services on the Internet.Web services are based on XML.They make use of XML-based protocols to describe operations to be performed and data to exchange with one another regardless of location and operating systems.SOAP is a transfer protocol of Web services whose messages have universally adopted XML as the mechanism for encoding data.XML is located at message layer in the whole Web services application.XML engine deals with XML data in the Web services,therefore it is named the message layer gateway.On the XML Engine platform,with the help of DSO mechanism,it can dynamically load the encryption,decryption,digital signature,validation,and filtrtion modules into the Apache server.XML Engine can filter the XML data to make sure the safety of Web services.Meanwhile,it is not only applied to SOAP package,but also to any situation relating to XML filtration.
Research on STEP Data Security Based on XML

Jie HUANG,Wen-jiang PEI,Ai-qun HU

DOI: https://doi.org/10.3969/j.issn.1001-3695.2005.12.043

2005-01-01

Abstract:XML technology and cryptography are presented to issue STEP data on Internet.First,a mapping is designed between STEP and XML.STEP data is changed into XML document.Then a methodology is proposed for XML document.Last,an application instance is designed to test the methodology.
Research and Design of XKMS-based Centralizing Identity Management System

CAI Minye,JIANG Xinghao,LI Jianhua

DOI: https://doi.org/10.3969/j.issn.1009-8054.2007.03.020

2007-01-01

Abstract:Upon careful study of the XML Key Management Specification,the XML-Signature technology and the XML-Encryption technology,this paper proposes a solution of secure Web Services which is based on XKMS,and pro- vides a PKI service.And,this paper also describes the researches on certification registration process and certification validation algorithm.
RESEARCH AND IMPLEMENTATION OF MOBILE SECURITY BASED ON J2ME AND XML

Liu Qing,Peng WeiHua,Xu Ming

DOI: https://doi.org/10.3969/j.issn.1000-386X.2006.10.047

2006-01-01

Abstract:This paper makes a deeply analysis and research on security problems of mobile application,considered the performance of the mobile terminal and the development trend of network service,we proposed a security scheme based on J2ME and XML which implements XML-Signature and XML Key Management.
Research of data access control based on partial encryption

De-zhi XU,T.Haider

DOI: https://doi.org/10.3969/j.issn.1006-8937-B.2005.09.004

2005-01-01

Abstract:As the standard of information representation, transfer, and storage on the Web, XML has been used more and more widely. Using XML to represent data's access control will bring more flexibleness and operation on the system applicat ion. This paper puts forward an approach for the data's access control, which is based on XML data encryption and the technology of accessing of relation table is referred to the control rules of data accessing.
An Electronic Official Document System Design Based on XML Security

ZHU Yiqun,ZHANG Quanhai,LI Jianhua

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.09.048

2006-01-01

Abstract:This paper presents an electronic official document system design based on XML security.The system security analysis shows that the system can support a wide range of security services,such as the confidentiality protection,integrity,authentication,non-repudiation and the system is a security electronic official document system.
Research on Web Services Security Mechanism Based on SOAP Extension

Lei Feng

2009-01-01

Abstract:The security problem of Web services must be taken into count in E-Commerce.SOAP protocol is core of Web services.But SOAP messages transmit in channel with XML documents and can be modified or revealed easily because they may stay or be transformed in middle nodes.In order to enhance Web security,according to SOAP security extension model,XML digital signature and encryption techniques are adopted to extend security of Web services.It can ensure confidentiality and integrality of SOAP messages in end-to-end transmission,and can authenticate user identity.
XML United Signature

郑晓梅,张天

DOI: https://doi.org/10.3969/j.issn.1002-137x.2010.08.045

2010-01-01

Computer Science

Abstract:This paper firstly analysed the typical application of the XML multi-party communication chain business in the current Web server architecture and built up the corresponding research model.Based on the model,this paper proposed a new encryption technology named untied signature,which can solve the problems of the reduplicate signature and not strict information association using the traditional signature technology.This paper also analysed the limitations of using current XML specification to fulfill the encryption technology,and then raised the implementation scheme of XML untied signature.Finally,this paper presented the syntax definition of XML united signature.
Security Analysis of XML Web Service Based on SPKI

WANG Qian,LIU Qi-bin

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.09.041

2006-01-01

Abstract:Security problems of web service are introduced,and currentsecurity model and frameof web service areanalyzed.Especially,message security at SOAP layer is described importantly including XML encryption and XML digital signature,and security expansion on SOAP is also expressed.WS-security criterion is presented,and on this basis,SPKI certificate is advised to use as a security token for the authority and identity authentication.Then the structure of SPKI security token and the predominance of being used in the web service are put forward.At last,a security structure is formed,which is composed of XML security,SOAP security,UDDI security and SPKI certificate security.
Securing Xml Document Sources and Their Distribution

JQ Zhang,V Varadharajan,Y Mu

DOI: https://doi.org/10.1109/aina.2004.1283969

2004-01-01

Abstract:XML has been becoming popular for data store, document representation and exchange over the Web. Security mechanisms for the protection of XML document sources and their distribution are essential. Author-X is a Java based system specifically conceived for the protection of XML documents. It supports a range of protection granularity levels and subject credentials, but also supports push distribution for documents broadcast. However, the proposed system has certain disadvantages in terms of both security and dynamic key management. For example, a sender has to distribute the secret keys to all correspondent users for different XML documents. Also, if one of the users leave or a credential is changed, then the sender has to re-encrypt all related documents and redistribute the secret keys to all correspondent users. In this paper, we present a scheme for securing XML documents and their distribution. Our scheme has several advantages over Author-X such as: (a) one user needs only one private key; (b) even when the user leaves or a credential is changed, all the other users will be unaffected; (c) there is no need to establish a secure channel for key distribution; and (d) there is no need for checking the XML documents for access control policies applied. These make the security model more efficient and robust as well as simplifying the programming and the generation of the encrypted document base.
XBSIA:A Kind of XML-Based Security Integrated Architecture

饶元,陆淑敏,李尊朝,冯博琴

DOI: https://doi.org/10.3969/j.issn.1000-7180.2004.12.023

2004-01-01

Abstract:After formulated the definition of information security, an XML-based logistic security hierarchical structure and a protocols stack were presented in the paper. Moreover, a XKMS Trust Architecture Model, XKMS-TA, was built on some XML-based security technology, such as XML-Encryption, XML-Signature, XML-Access Control and XKML. This model decreased effectually the degree of complexity about the client collocated, PKI deployed and the cost of operating maintained, as well as increased the interoperation between the PKI sites. Furthermore, mixed the XKMS-TA model and XML-Access Control technology, XBSIA (XML-Based Security Integrated Architecture), a new XML-based Security integrated solution, was designed and applied in the programming of OPEN-CLASS system. The results of practice proved that XBSIA solution has great security and dynamic maintenance.
Electronic Documents Exchange System Based on XML Security Technology

YAN Yong,HU Hua-ping

DOI: https://doi.org/10.3969/j.issn.1673-629x.2006.05.036

2006-01-01

Abstract:It has become an important subject for how to improve the security,opening and inter-operation of the information in the enterprise-spanning electronic document exchanging system.This paper presents a model of the electronic document exchanging system based on XML security technology aimed at the problems about the unsafety of the transmission and the storage of the key information,the disunity identity validation,the unconformance security specifications in the Internet/Intranet among different applications.This system based on the SAML-based single sign-on and authorization,XACML-based integrated access control,and the protection of key information using the XML encryption and signatures,and provided a solution against the menace to system.
Secure Distribution and Access of XML Documents

Junqi Zhang,Vijay Varadharajan,Yi Mu

DOI: https://doi.org/10.1504/ijhpcn.2005.009423

2005-01-01

International Journal of High Performance Computing and Networking

Abstract:XML has been widely used for representation and storage of documents and their exchange over the internet. Security mechanisms for the protection of XML document sources and their distribution are essential. In this paper, we present a novel scheme for securing XML documents and their distribution over the internet. The proposed scheme has some distinct features. It requires only one private key for each user. Therefore, when a user leaves or joins the system, keys of all the other existing users in the system remain unchanged. This makes the proposed scheme more attractive, and hence particularly suitable for the dynamic distribution of documents over the internet.
Research of Security Model for Wireless Mobile Application based on XML

SHEN Yong-jun,LI Xiao-qing,ZHANG Xiao-wei,SHI Xiao-ping

DOI: https://doi.org/10.3969/j.issn.1008-0570.2008.36.025

2008-01-01

Abstract:In recent years,With further popularization of wireless mobile technology,information security has become a major obstacle of universal of the wireless mobile application.This paper as the background of the project of "Wireless Population Information Query based on Mobile Phone" analyses the advantage of J2ME and XML security technology in setting up a wireless mobile application security model,and designs the End-to-End data security model of the J2ME wireless mobile application based on J2ME and XML. Finally,the paper sets focus on the successful realization of the security model in the wireless population information query system.
DESIGN OF A SECURE FRAMEWORK TO SECURELY EXCHANGE(XML-BASED)DOCUMENTS OVER THE INTERNET

安南,张申生

2002-01-01

Abstract:This paper designed and implemented a secure framework that provides XML signature function, XML element-wise encryption function, smart card based crypto API library and Public Key Infrastructure (PKI) security functions to achieve confidentiality, integrity, message authentication, and/or signer authentication services for XML documents and existing non-XML documents that are exchanged by Internet for e-commerce application.
Research on Secure Data Exchange Model Based on XML

朱庆生,戴刚

DOI: https://doi.org/10.3969/j.issn.1674-8425-b.2009.06.009

2009-01-01

Abstract:This article designs a secure and efficient data exchange model based on XML to implement secure transportation and storage of data and keys.Combined with XKMS,this model simplifies the registration and management of public keys,and is capable of providing unified and safe service for data exchange of trans-operation system.Besides,this paper introduces concrete plans for the modeling including the enciphering and deciphering of XML documents,the generation of encoded key of DEK,the storage management of enciphered data keys,and discusses the methods in this model for XKMS to manage public keys and the security mechanism provided.
CIT/XML Security Platform Syntax and Processing

安南,张申生

DOI: https://doi.org/10.3969/j.issn.1003-7985.2002.02.002

2002-01-01

Abstract:Today companies and organizations are using the Web as the main information dissemination means both at internal and external level. Information dissemination often takes the form of XML documents that are made available at Web servers, or that are actively broadcasted by Web servers to interested clients. These documents often contain information at different degrees of sensitivity, therefore a strong XML security platform and mechanism is needed. In this paper we developed CIT/XML security platform and take a close look to syntax and processing of CIT/digital signature model, CIT/encryption model, CIT/ smart card crypto and SPKI interface security models. Security services such as authentication, integrity and confidentiality to XML documents and non-XML documents, which exchanged among various servers, are provided.
Network Security Policy Based on XML

王伟,曹元大

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.08.047

2004-01-01

Abstract:The security facilities from different manufactures cannot communicate and cooperate because they use the respective language to describe information. This paper presents a set of network security information description ways based on XML to resolve this problem.

A Research on XML and XML-Related Security

Research on security extensions based on Java 2 security architecture

Research on the Tactics to Realize Information Exchange and Se-curity Based on XML

Research of XML Engine Security Model on Web Services

Research on STEP Data Security Based on XML

Research and Design of XKMS-based Centralizing Identity Management System

RESEARCH AND IMPLEMENTATION OF MOBILE SECURITY BASED ON J2ME AND XML

Research of data access control based on partial encryption

An Electronic Official Document System Design Based on XML Security

Research on Web Services Security Mechanism Based on SOAP Extension

XML United Signature

Security Analysis of XML Web Service Based on SPKI

Securing Xml Document Sources and Their Distribution

XBSIA:A Kind of XML-Based Security Integrated Architecture

Electronic Documents Exchange System Based on XML Security Technology

Secure Distribution and Access of XML Documents

Research of Security Model for Wireless Mobile Application based on XML

DESIGN OF A SECURE FRAMEWORK TO SECURELY EXCHANGE(XML-BASED)DOCUMENTS OVER THE INTERNET

Research on Secure Data Exchange Model Based on XML

CIT/XML Security Platform Syntax and Processing

Network Security Policy Based on XML