Research on STEP Data Security Based on XML

Jie HUANG,Wen-jiang PEI,Ai-qun HU

DOI: https://doi.org/10.3969/j.issn.1001-3695.2005.12.043

2005-01-01

Abstract:XML technology and cryptography are presented to issue STEP data on Internet.First,a mapping is designed between STEP and XML.STEP data is changed into XML document.Then a methodology is proposed for XML document.Last,an application instance is designed to test the methodology.

What problem does this paper attempt to address?

RESEARCH INTO THE NETWORK SECURITY TECHNOLOGY OF ELECTRONIC TAXATION SYSTEM ON INTERNET

Wei TIAN,Xiao-hu YANG,Xiao-yao XIE

1999-01-01

Abstract:In this article,we present research work which is focused on the Electronic Taxation System and its network security on Internet.Through analysis of the procedures of taxation and considerations of some of the characteristics of the current pragmatic network security technologies,we proposed a security model of ETS with reference to the system on Internet.
EXPRESS Driven XML Data Used in CAx/PDM Integration Framework

HAN Jie,LI Jiangxiong,KE Yinling,SU Caimao

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.10.076

2005-01-01

Abstract:In this paper, a new CAx/PDM integration framework based on STEP mapped XML-DTD/Schema has been addressed, which make an unanimous paradigm in production life cycle and Internet-based crossing-enterprise integration come true. And a new solution for CAx/PDM integration by means of Web service technology also has been represented. Finally, an example is illustrated to further argumentation.
Research On Data Analysis System Based On Xml (Id : 3-007)

Chen Guohai,Chen Jixi,Gu Xinjian,Zhan Hongfei

2006-01-01

Abstract:Historically, data analysis and data analysis system is the research hotspot of the manufacturing industry, and also the key issue of the informatization of modern enterprises. However, most of the data analysis systems used recently can't resolve the transformation and integration of the data sources efficiently, especially the isomerous data sources. The data expressing also seems lack of diversity. In the view of data transformation, integration and data expressing combining with the characteristic of the XML, a new data analysis system based on XML is proposed. Then the framework, hierarchical structure and the crisis problems of the system are analyzed in detail and that it has a promise future is revealed.
Research of XML Engine Security Model on Web Services

张艳,周明天,佘堃

DOI: https://doi.org/10.3969/j.issn.1001-3695.2008.07.074

2008-01-01

Abstract:Web services provide interface access to the software.And the interface realizes the calls of services on the Internet.Web services are based on XML.They make use of XML-based protocols to describe operations to be performed and data to exchange with one another regardless of location and operating systems.SOAP is a transfer protocol of Web services whose messages have universally adopted XML as the mechanism for encoding data.XML is located at message layer in the whole Web services application.XML engine deals with XML data in the Web services,therefore it is named the message layer gateway.On the XML Engine platform,with the help of DSO mechanism,it can dynamically load the encryption,decryption,digital signature,validation,and filtrtion modules into the Apache server.XML Engine can filter the XML data to make sure the safety of Web services.Meanwhile,it is not only applied to SOAP package,but also to any situation relating to XML filtration.
Two-Stage access control model for XML security

Wei Sun,Da-xin Liu,Tong Wang

DOI: https://doi.org/10.1007/11599517_64

2005-01-01

Abstract:As large corporations and organizations increasingly exploit the Internet as a means of improving business-transaction efficiency and productivity, it is increasingly common to find operational data and other business information in XML format. Access control for XML database is non-trivial subjects. A number of recent research efforts have considered access control models for XML data[1−5]. Our first contribution is a novel model for specifying XML security access control. Given an XML document accompanied by a document DTD, we allow a two-stage access control policies to pledge to security access XML document at file-level and element-level respectively. On the element-level access control, our approach for these access control policies is based on the novel notion of hide-node views. While the hide-node view DTD is exposed to authorized users, neither the internal XPath annotations nor the full document DTD is visible. Authorized users can only operate data over the hide-node view, making use of the exposed view DTD to access data. Our hide-node view mechanism guarantees that unauthorized user cannot access sensitive data and protects the schema information from access by unauthorized users. We think that the schema information also is sensitive data and should be protected from gain through the data accessing.
Research on the WEB-based Product Data Exchange Technology

Wenhui Fan

2008-01-01

Abstract:With the development of the network technology,the product data exchange system on STEP is not able to satisfy the need of the networked cooperative product development.As one of the most excellent standard languages of data exchange in Internet,XML plays a more important role in the networked product data exchange and sharing.The data exchange technology between STEP and XML and the transmission technology of XML data on SOAP were discussed,some key JAVA codes of the XML data encapsulation and transmission were offered.The framework of collaborative product development platform based on WEB was disposed.A solving approach was put forward for the product data exchange and sharing on WEB.
Research of Data Security of Distributed System-based Web Services

CUI Jian-Ming,FAN Li-Lin,WANG Xiao-Dong

DOI: https://doi.org/10.3969/j.issn.1672-6871.2006.03.012

2007-01-01

Abstract:Security and reliability of Web Services-based distributed system is introduced.Main technologies of current Web Services data transfer are analyzed and their weak points discussed.On this base,a detailed solution,which is a combination of encryption and digital signature to communicate with customer-end with canonical XML,is put forward.The transfer security of share data and the reliable trust relation between Web Services Server and customer is enhanced by this solution.
A privacy protection approach for XML-based archives management in a cloud environment

Zongda Wu,Jian Xie,Xinze Lian,Jun Pan

DOI: https://doi.org/10.1108/el-05-2019-0127

2019-10-11

The Electronic Library

Abstract:Purpose The security of archival privacy data in the cloud has become the main obstacle to the application of cloud computing in archives management. To this end, aiming at XML archives, this paper aims to present a privacy protection approach that can ensure the security of privacy data in the untrusted cloud, without compromising the system availability. Design/methodology/approach The basic idea of the approach is as follows. First, the privacy data before being submitted to the cloud should be strictly encrypted on a trusted client to ensure the security. Then, to query the encrypted data efficiently, the approach constructs some key feature data for the encrypted data, so that each XML query defined on the privacy data can be executed correctly in the cloud. Findings Finally, both theoretical analysis and experimental evaluation demonstrate the overall performance of the approach in terms of security, efficiency and accuracy. Originality/value This paper presents a valuable study attempting to protect privacy for the management of XML archives in a cloud environment, so it has a positive significance to promote the application of cloud computing in a digital archive system.

information science & library science
DESIGN OF A SECURE FRAMEWORK TO SECURELY EXCHANGE(XML-BASED)DOCUMENTS OVER THE INTERNET

安南,张申生

2002-01-01

Abstract:This paper designed and implemented a secure framework that provides XML signature function, XML element-wise encryption function, smart card based crypto API library and Public Key Infrastructure (PKI) security functions to achieve confidentiality, integrity, message authentication, and/or signer authentication services for XML documents and existing non-XML documents that are exchanged by Internet for e-commerce application.
An Electronic Official Document System Design Based on XML Security

ZHU Yiqun,ZHANG Quanhai,LI Jianhua

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.09.048

2006-01-01

Abstract:This paper presents an electronic official document system design based on XML security.The system security analysis shows that the system can support a wide range of security services,such as the confidentiality protection,integrity,authentication,non-repudiation and the system is a security electronic official document system.
Model Design on DAS and Research of XML Encrypted Data Querying

Xia Shi-xiong,Ke Yu-Yi,Wang Chu-jiao

DOI: https://doi.org/10.1109/wisa.2009.42

2010-01-01

Journal of Computer Applications

Abstract:We have designed a DAS (Data As a Service) model of e-commerce by using the semi-structured xml data file system instead of traditional database--the general B / S model, which mainly includes the clients’ data encryption, key management on the server and xml encrypted data querying processing on the service provider. The searching method that we connected the xml index‘s skill and dewey encoding [1,2] based on the level to achieve users’ order query processing of xml encrypted data. This project has greatly reduced the system’s maintenance costs and improved the system’s capability and operating efficiency. At the same time it can help the enterprise to promote their benefits under the premise of guaranteeing the system’s security and stability.
CIT/XML Security Platform Syntax and Processing

安南,张申生

DOI: https://doi.org/10.3969/j.issn.1003-7985.2002.02.002

2002-01-01

Abstract:Today companies and organizations are using the Web as the main information dissemination means both at internal and external level. Information dissemination often takes the form of XML documents that are made available at Web servers, or that are actively broadcasted by Web servers to interested clients. These documents often contain information at different degrees of sensitivity, therefore a strong XML security platform and mechanism is needed. In this paper we developed CIT/XML security platform and take a close look to syntax and processing of CIT/digital signature model, CIT/encryption model, CIT/ smart card crypto and SPKI interface security models. Security services such as authentication, integrity and confidentiality to XML documents and non-XML documents, which exchanged among various servers, are provided.
A model of XML access control with dual-level security views

Wei Sun,Da-xin Liu,Tong Wang

DOI: https://doi.org/10.1007/11610496_109

2006-01-01

Abstract:XML becomes a standard format for data interchanges on Internet, especially in E-commerce. Although XML technology has been widely used, the research and development on XML security is still at the early stage. The control of XML access is important for protecting XML documents from being illegally modified or accessed. Most of available models utilize a single level check point. In this paper, we proposed an access control model with dual level access control: file-level and element-level (or attribute-level). The model allows adopt the XBLP policy with file-level security, while employs Hide-Node View for element-level security. The architecture framework of the access control model and implementation are briefly described.
XML and STEP based network product information integration

Fu-min ZHAO,Zhi-sen WANG,Chun-xian WANG,Xue-ning CHU

DOI: https://doi.org/10.3969/j.issn.1009-0134.2001.04.001

2001-01-01

Abstract:While the prevalence of Internet brings to infinite vigor of manufacturing, using Web technology to integrate the product information becomes a necessary and important research subject. In this paper, the XML technology is introduced and the mapping from STEP to XML is studied to integrate the STEP and Internet. The new generation product information of networked manufacturing system and its prosperous future is significantly discussed.
XML Keyword Search Based on Secure Access Control

李晓东,朱皓,杨卫东

DOI: https://doi.org/10.3778/j.issn.1673-9418.2010.01.008

2010-01-01

Abstract:XML(extensive makeup language)keyword search is easy to use,and users do not have to understand the schema,recently is widespreadly concerned by the people.Current researches about the keyword search are mainly focused on the algorithms and the sort of the results,but ignore the security issues.Combining with XML keyword search and XML security control,for the first time,this paper researches the XML keyword search method based on secure access control,including identifying the XML keyword search results based on the secure access control rules,establishing keyword index using security view as well as keyword search algorithm based on the above two aspects,and the three aspects above are on the basis of the XML keyword's smallest lowest common ancestors(SLCA) and view-based secure access control rules.The experimental result shows that in order to satisfy the secure access control rules,this algorithm although needs extra time to get the correct results but is generally efficient.
Preparations For Encrypted Xml Metadata Querying

Ling Feng,Willem Jonker

IF: 4.397

2004-01-01

Computer Systems Science and Engineering

Abstract:Metadata management is a key issue in Web-based intelligent environments. it plays an important role in a wide spectrum of areas, ranging from semantic explication, information handling, knowledge management, multimedia processing to personalized service delivery. As a result, security issues around metadata management needs to he addressed in order to build trust and confidence to ambient environments. The aim of this paper is to bring together the worlds of security and XML-formatted metadata management in such a way that, on the one hand the requirement on secure rnetadata management is satisfied, while on the other hand the efficiency on metadata processing can still be guaranteed. To this end, we develop an effective approach to enable, efficient search on encrypted XML metadata. The basic idea is to augment encrypted XML metadata with encodings which characterize the topology and content of every tree-structured XML metadata, and then filter Out candidate data for decryption and query execution by examining query conditions against these encodings. We describe a generic framework consisting of three phases, namely, query preparation, query pre-processing, and query execution, to implement the proposed search strategy.
The Research and Implementation of Trust Management Mechanism in the XML-Based Security Management Platform

PENG Jie,GUO Shan-Qing,MAO Bing,XIE Li

DOI: https://doi.org/10.3969/j.issn.1002-137X.2005.05.013

2005-01-01

Computer Science

Abstract:In this paper, we analyze the problems exposed by the current security management systems, and intro- duce the trust mechanism to XML-based security management platform. In the traditional trust model, the trust sub- kect is unitary, which can not meet the requirements raised by the XML-based security management to trust. In order to solve this problem, some necessary improvements are made to the traditional trust model. First, the bidirectional trust is proposed, resolving the mutual trust problem of the server and client. Second, a local trust library is added to enhance both the administrator's global analysis and the assessment of reputation-based trust degree.
XBSIA:A Kind of XML-Based Security Integrated Architecture

饶元,陆淑敏,李尊朝,冯博琴

DOI: https://doi.org/10.3969/j.issn.1000-7180.2004.12.023

2004-01-01

Abstract:After formulated the definition of information security, an XML-based logistic security hierarchical structure and a protocols stack were presented in the paper. Moreover, a XKMS Trust Architecture Model, XKMS-TA, was built on some XML-based security technology, such as XML-Encryption, XML-Signature, XML-Access Control and XKML. This model decreased effectually the degree of complexity about the client collocated, PKI deployed and the cost of operating maintained, as well as increased the interoperation between the PKI sites. Furthermore, mixed the XKMS-TA model and XML-Access Control technology, XBSIA (XML-Based Security Integrated Architecture), a new XML-based Security integrated solution, was designed and applied in the programming of OPEN-CLASS system. The results of practice proved that XBSIA solution has great security and dynamic maintenance.
Application of XML Technique to Data Exchange in Power System Automation

何志苠,涂光瑜,罗毅,盛戈皞

DOI: https://doi.org/10.3969/j.issn.1674-3415.2004.06.004

2004-01-01

Abstract:With the increasing needs of data sharing in power system among many different automation systems, it is imperative to find a tool that can facilitate effective data sharing and exchanging. XML is becoming a standard for data communication through the Internet because of its good data-storing form, expandability, hyper-structuralization and web-transforming, etc. In this paper, the application of XML to data exchange in power system automation is discussed in detail. Taking video monitoring system as an example, the implementation methods and application characteristics are elaborated and analyzed.
Efficient Processing of Secured XML Metadata

Ling Feng,Willem Jonker

DOI: https://doi.org/10.1007/978-3-540-39962-9_72

2003-01-01

Abstract:Metadata management is a key issue in intelligent Web-based environments. It plays an important role in a wide spectrum of areas, ranging from semantic explication, information handling, knowledge management, multimedia processing to personalized service delivery. As a result, security issues around metadata management needs to be addressed in order to build trust and confidence to ambient environments. The aim of this paper is to bring together the worlds of security and XML-formatted metadata management in such a way that, on the one hand the requirement on secure metadata management is satisfied, while on the other other hand the efficiency on metadata processing can still be guaranteed. To this end, we develop an effective approach to enable efficient search on encrypted XML metadata. The basic idea is to augment encrypted XML metadata with encodings which characterize the topology and content of every tree-structured XML metadata, and then filter out candidate data for decryption and query execution by examining query conditions against these encodings. We describe a generic framework consisting of three phases, namely, query preparation, query pre-processing and query execution, to implement the proposed search strategy.

Research on STEP Data Security Based on XML

RESEARCH INTO THE NETWORK SECURITY TECHNOLOGY OF ELECTRONIC TAXATION SYSTEM ON INTERNET

EXPRESS Driven XML Data Used in CAx/PDM Integration Framework

Research On Data Analysis System Based On Xml (Id : 3-007)

Research of XML Engine Security Model on Web Services

Two-Stage access control model for XML security

Research on the WEB-based Product Data Exchange Technology

Research of Data Security of Distributed System-based Web Services

A privacy protection approach for XML-based archives management in a cloud environment

DESIGN OF A SECURE FRAMEWORK TO SECURELY EXCHANGE(XML-BASED)DOCUMENTS OVER THE INTERNET

An Electronic Official Document System Design Based on XML Security

Model Design on DAS and Research of XML Encrypted Data Querying

CIT/XML Security Platform Syntax and Processing

A model of XML access control with dual-level security views

XML and STEP based network product information integration

XML Keyword Search Based on Secure Access Control

Preparations For Encrypted Xml Metadata Querying

The Research and Implementation of Trust Management Mechanism in the XML-Based Security Management Platform

XBSIA:A Kind of XML-Based Security Integrated Architecture

Application of XML Technique to Data Exchange in Power System Automation

Efficient Processing of Secured XML Metadata