Xml Security Technology Research And In E-commerce Applications

XML technology becomes popular on data storage and data exchange in a TCP/IP network because of its powerful description, structure, easy expansion, and cross-platform. The security of XML becomes much more important. As Web-based XML e-commerce orders in Open environment may be liable to various security threats on the Internet at transmission and storage, so need apply data encrypt and digital signature to ensure the security of Web service.Firstly, XML technology and modern security technology based on cryptography is discussed in this paper. Then The XML encryption, XML digital signature, XML Key Management Specification, security assertion markup language and XML Access Control Markup Language are studied. Then,Advanced a e-business security platform including encrypt of XML document, digital signature ,accessing control and management of secret key.This platform provides provides connect port for upper implementation level and parse XML object file through DOM.In the implementation of this scheme, XML encryption / decryption functions based on 3DES encryption algorithm and RSA-based digital signature / validation function are programmed with .Net platform and C# Language. These modules provide the XML document confidentiality, authentication, non-repudiation, integrity, and other security services. The scheme and its implementation can satisfy the security requirements of Web-based XML e-commerce orders on the Internet transmission and storage. In the end of this paper, the security of this integrated scheme is analyzed.