浅析XML数据安全保护技术

在面向互联网环境的数据库安全方面,作者主要研究了内涵级的XML数据安全保护技术。在XML访问控制方面,改进了现有模型中授权主体的定义范畴,同时将请求评估模块和决策执行模块显式分开,增加了定制安全策略和安全规则的灵活性和通用性。该文探讨了利用XML对文档进行数字签名和对签名进行校验、以及对XML文档加解密的方法,并利用这些技术实现了一个基于Java通用平台的XML数字签名和加密原型系统。

Analyse to protective technology of XML Data Safty

In the database environment for Internet security,The author studied the content of the XML data-level security protection technology. XML Access Control, improving the existing models authorized the definition of the main areasMeanwhile assessment module and the implementation of its decisions will request separate module explicit,Customization security strategy to increase the flexibility and versatility and safety rules. To explore the use of XML digital signatures and the signature on the document was checked.and the XML encryption methodsand use of these technologies for the realization of a universal platform for Java-based XML digital signatures and encryption prototype system.