Research On Context-sensitive XML Digital Signature Scheme

As XML (eXtensible Markup Language) is widely used, especially the XML is widely used in electronic commerce, XML data security problem has become the focus of attention. In the fine grained security environment, the context of XML digital signature independence in signature is missing the original semantic protection, leading to its application in cloud computing security and Web services security faced in packaging such as XML digital signature attack problem.This situation leads security issues, such as XML wrapping attack, in security of cloud computing, Web Services security and other applications. The paper tries to present element context-referential integrity for XML data, and builds systematic model for XML data integrity in XML digital signature. Through integrating the model into XML signature, the research constructs the theory and scheme of the3-tuple context-sensitive XML signature. With keeping advantages of XML signature, the paper makes it have the feature of context-sensitive, and prevents injection attack efficiently as well as providing dependency theory for XML multi-signature. The results improve the security of XML signature for Web Services security and cloud computing security, and further facilitate the development of XML security and related disciplines.