The Application Of XML Security Technology In E-Commerce

XML (Extensible Markup Language) is a data standard developed by W3C (The Worldwide Web Consortium). Its structure, interoperability,scalability and easy exchange feature have been widely used in many industries.XML for the realization safe and highly effective E-Commerce provided one kind of open standard. It solved some of the weaknesses of traditional data exchange, and lead small and medium-sized enterprises into E-Commerce. XML-structured data can be separated from commercial norms and manifestations; and can extremely conveniently to exchange and processing. Thus, it has become a new generation emerged data exchange standards as soon as it appears.E-Commerce takes too much attention on XML data exchange, but less on ensures the safety of the XML data exchange. Compare With the traditional data transmission security, the XML data in the implementation of security measures has its own characteristics. Ignore XML data security will make transactions confidential and sensitive information at risk. Therefore, how to realize the security of XML data transmission in the unsafe network is very urgent.XML security technologies involved in the following security issues: XML Encryption, XML Signature, XKMS (XML Key Management Specification) and SAML (Security Assertion Markup Language). This paper focuses on XML Encryption, XML signature two parts.XML Security technology can ensure the integrity, authenticity and non-repudiation of data transmission. It can also make up for the deficiencies of the traditional security technologies. And XML Signature and XML Encryption is the foundation of a series of standard of the secure Web Services. Therefore, Ensure the safety of XML data will play a vital role in the entire Web development.This paper focus on XML security technology, the major elements are as follow:1. Introduced the preparation rules, characteristics, programming interfaces, show, and application areas of XML.2. Specific analyses the working principle of XML Encryption and XML Signature, discussed the realization of XML Encryption and XML Signature technology. And it has deep compared XML Signature and traditional digital Signature.3. Based on VS.net platform, organic combination with C #, XML Encryption, XML Signature, in the "Flight travel reservation system" project, fulfills the XML Encryption, Decryption, Signature and validation of XML Signature, and other functions.