The Research Of Key Management System Based On XKMS

With the rapid development of e-business technology, XML become the standard of data exchange gradually, especially with the mature and mass deployment of ebXML (Electronic Business XML) technology based on XML. XML has great advantages in web applications and enterprise applications, because it is simple, extensible, reusable, interoperable and open, and it has other characteristics. Web Services provides a kind of services oriented architecture, it is really distributed, loose coupling, independent of the positions of services provider and consumer and independent of platforms. The underlying protocols of Web Services, such as WSDL, UDDI and SOAP are all based upon XML.The wide use of XML and Web Services issues corresponding security problems, for example, the information being captured during the transmission on network, the transmitted document being forged, the counterfeit of other's identity etc.To solve these security problems, the thesis studied and analysed XML Key Management Specification which was formulated by the W3C organization.The thesis elaborated the XKMS thought, the composition and the function, studied and analyzed deeply the detail of XKMS standard, and carried on the summary to the XKMS superiority.The thesis also researches XML security and Web Services security in depth and systematically, such as mainly security specifications, existing technologies and the latest progress. Based on this foundation, the thesis proposed a kind of XML key management system, follows the XKMS2.0 standard, which could support the common symmetrical encryption algorithm and the asymmetrical encryption algorithm, with good maintainability as well as the extendibility. It can be used in guaranteeing the the security of Web Services that put the XML security specifications into application.