基于XML安全技术的电子公文交换系统  

Electronic Documents Exchange System Based on XML Security Technology

作　　者：颜勇[1] 胡华平[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机技术与发展》2006年第5期103-105,共3页Computer Technology and Development

摘　　要：在跨越企业边界的电子公文交换系统中,如何提高信息的安全性、开放性和互操作性是一个重要的研究课题。文中针对目前Internet/Intranet环境中跨系统边界交换数据存在的关键数据的传送与储存不安全、各系统身份验证不统一、安全技术标准不统一等问题,提出了一个基于XML安全技术的电子公文交换系统模型。该系统采用基于SAML的单点登录和认证授权,基于XACML的集成访问控制,以及基于XML加密和签名的关键数据加密保护。并在此基础上分析系统面临的威胁,提出可以应对的措施。It has become an important subject for how to improve the security,opening and inter - operation of the information in the enterprise - spanning dectronic document exchanging system. This paper presents a model of the electronic document exchanging system based on XML security technology aimed at the problems about the unsafety of the transmission and the storage of the key information,the disunity identity validation,the unconformance security specifications in the Internet/Intranet among different applications. This system based on the SAML-based single sign- on and authorization, XACML-based integrated access control, and the protection of key information using the XML encryption and signatures,and provided a solution against the menace to system.

关 键 词：安全声明标记语言 可扩展访问控制标记语言 XML加密 XML签名 访问控制 单点登录 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]