A Controlling Method Of The XML Electronic Official Document Classification Level Based On Security Label

The management of thesis documents、CD-ROMs and other entities has developed earlier in our countries. With the gradually push forward of government information work, the demands of exchanging electronic official documents between all levels of government organs or political organizations have became increasingly critical. Our nation issued specification for the structure of electronic official document based on XML on the purpose of information cross-platform intercommunication and government affairs collaboration. The specification’s security part had made provisions for electronic official documents exchange and transport security.The thesis proposes a control method of electronic official documents classification level based on security label. While carrying on research to this topic, we take the idea of tracing latest international research and also based on the actual work of E-government. The method can guarantees the correct information flow, the implementation of information classification to protect sensitive data. The method uses two-way authentication mechanism to ensure the reliability of both identity; proposes a new method of XML operation based on ZIP-Container; proposes a new method of security label parameters selection compatible with XML Electronic Official Document; uses domestic SM3HASH algorithm; XML encryption strategy and element-level access control.The thesis includes five parts, the first part introduces brief history of XML and the development of security label research; the second part analyzes the new development of XML security technology driven by security label; the third part introduces our electronic official document specification and the requirements of classification level based on security label level for access control; the fourth part details the technical difficulties of controlling XML Electronic Official Document based on security label、 related security technologies、design of the method and expected achievements、 document formats translation、the implementation of the access control policy and SM3algorithm; the last part is the recommendations of next study.