| Development of Internet makes more and more information turn into Internet, every aspect need such as transferring,exchanging,preserving,search of information that is continuing increasing,Internet is also confronted with the all kinds of safe threat at the same time,for example,information steal,bear ill will to cheat, pretend,revise illegally as well as various disturb destroy and so on.Be especially obvious especially in the system service that is comparatively sensitive to information or having keeping secret to some information,the network safety already becomes the important problem that the whole world pay close attention to,Although present the technology of network safety in common use basically satisfies requests of information storage and transmission secrecy,data integrity,undeniable,but more or less has the insufficiency in certain aspects.Extension mark-up language XML develops rapidly because of whose structure-rization,fine extension and self description,it becomes the standard of data's describing step by step,development of safe technologies such as XML data encrypt,deciphering,signature also urges the XML document to be able to become the important media of information exchanging,XML data exchanging technology can be able to be applied sufficiently in Electronic Commerce platform.The thesis studied mainly for the relatives of XML-security technology,and compared it with the network safety technology used at present.Sumed up out advantage and characteristic of XML-security technology in every aspects,Desiged a XML-based data safety exchanges frame.At last applyed XML-security technology to a concrete electron business system that proved its value of practice.The main part works of the thesis as follows:The thesis researched the current network security framework.Including encryption,digital signatures and key management services,etc,and summarizd characteristics and problems of the security framework.Then according to researching XML-Security technology,the thesis designed a information exchange platform base on XML-Security,and built the implemented framework of the platform and compared it with the current one,such as XML encryption has the advantages of operational to general file encryption,XML digital signature shows flexibility and diversity in comparison with traditional digital signature,XML key management service using XML and PKI technology to achieve simplicity of key management.The thesis applyed the safe frame of XML into actual Electronic Commerce project by studying the suporting of Microsoft.net platform to XML-security technology,and the security of the exchange of key information in the system is ensured,for example,delivery of electronic orders between the client and service.In accordance with the characteristics of B/S structure,different XML security modules which run on the client-and server-side are designed,and these modules also have independence. |
