E-commerce Security System And Its Xml Security Design And Implementation,

E-commerce has become more and more important in our world economy, therefore its security has been high lightened nowadays. The cost, availability and interoperation of information security have become the bottleneck of security solutions. The XML Security Layer emerges in this situation. The main concept of the project is to describe data in XML format and then processes the key elements with XML encryption and XML signature. It separates security module from application system and become common usage software. Our project's main target is to provide application system, especially the E-commerce system the unified security interfaces to ensure information security.In our project, we try to make use of XML to enhance the E-commerce security aspect and our product act as a separate security component of application system. Firstly, we studied the E-commerce security architecture that used today; then, we proposed E-commerce security architecture based on XML Encryption, XML Signature, XKMS, SAML and SOAP. We compared the tow architectures and pointed out the merits of the latter one. Finally, we choose XML Encryption, XML Signature and SOAP to build an XML Security Layer.The thesis is organized as follows, we first introduced a series of XML related language features and protocols. Secondly, we proposed a XML based E-commerce security architecture. Thirdly, some realized technologies such as Apache Axis, Java RPC and handler technique; how to design a client and server based XML Security Layer and its interfaces in real projects. Finally, we compared our XML Security Layer to IBM XML Security Suit and describe the better performance and prospect of our project.