Research And Application Of The Information Security Based On XML

With the development of computer and network technology, our society has stepped into the information society, and the information security has become closer to people′s common life. Cryptology and Digital Signature has already become one of main applications in the information security.The interoperability problems are the most urgent need in network. Because there are no uniform standards in software, hardware, and coding, it brings a series of problems such as interoperability, communications, database sharing, system transplanting and application expanding. The production of XML(eXtensible Markup Language) has brought a good solution to this problem. In respect of data expressing XML has its inherent advantages: strong self-explanation, clear semantic and so on. All these characters make XML a common language in the internet word gradually. With the wide use of XML, XML security technology came into being. World Wide Web Consortium (W3C) has established two XML safety standards: XML Signature Recommendation and XML Encryption Working Draft.This thesis compares the XML security with the traditional digital security, and points out the features and advantages of XML signature and encryption.Furthermore, this thesis makes a further study on XML signature and encryption, especially in the process of Core Signature. By anaglyzing Core Signature, a concept of "compressed XML Signature Verification template" is suggested, which provides an effective method to compress the multi-signature document that based on XML.As increasing needs of digital signature in common life, multi-signature has gradually become a hot research issue. This thesis gives a new idea on multi-signature realization, which by define special structure and need not change the existed public key system and signature algorithm. Under the guidance of this thinking, two improved multi-signature schemes are proposed: "improved sequential digital multi-signature scheme based on XML" and "improved broadcasting multi-signature scheme based on XML with signers′intentions". In these two multi-signature schemes, "compressed XML Signature Verification template" is used to compress the signed document effectively. At last this thesis analyzes the two improved schemes in security, efficiency, advantages and disadvantages.The new multi-signature schemes suggested in this thesis are good ideas to upgrading and expanding mature signed system.