基于二次数字签名的SOAP时间戳协议

在简单对象访问协议(SOAP)中，若时间戳签发机构(TSA)存在欺诈行为，协议的安全性就无法保证。针对该问题，提出基于二次数字签名的SOAP时间戳协议TPSS。TSA在签发时间戳时会留下不可否认的证据，其他实体可通过该证据检验时间戳的真实性，由此规范TSA的行为。在Hulft 7系统中的应用结果证明，利用该协议可有效规范TSA和发送方的行为，建立更加安全、稳定的网络传输机制。

SOAP Time Stamp Protocol Based on Secondary Digital Signature

Simple Object Access Protocol(SOAP) has security loophole if Time Stamp issuing Authority(TSA) frauds.In order to solve the problem,this paper proposes a Time stamp Protocol of SOAP based on Secondary digital signature(TPSS),which can regulate TSA’s behavior.It requires TSA to create undeniable evidence when issuing time stamp.Necessarily,other entities can verify the authenticity of timestamp.The protocol is adopted in Hulft 7 system,and the results show that the protocol can regulate TSA’s behavior and sender’s action effectively.And a more secure and more stable mechanism for network transporting can be established by the protocol.