XBSIA:一种基于XML的安全技术集成框架

通过信息安全性的形式化定义指出了XML的逻辑安全层次与相应的协议结构，在分析：XML相关安全技术的数据结构与机制的基础上，提出了一个基于XKMS的信任服务架构模型XKMS-TA，该模型降低了客户端配置的复杂度和部署与维护的成本，并提高了互操作性。随后，本文将XKMS-TA与XACM相结合，设计了一个XML的安全集成体系结构：XBSIA，并在OPEN-CLASS分布式网络教学平台的开发过程中得到实现，实践证明XBSIA具有较强的安全性与动态可维护性。

XBSIA:A Kind of XML-Based Security Integrated Architecture

After formulated the definition of information security, an XML-based logistic security hierarchical structure and a protocols stack were presented in the paper. Moreover, a XKMS Trust Architecture Model, XKMS-TA, was built on some XML-based security technology, such as XML-Encryption, XML-Signature, XML-Access Control and XKML. This model decreased effectually the degree of complexity about the client collocated, PKI deployed and the cost of operating maintained, as well as increased the interoperation between the PKI sites. Furthermore, mixed the XKMS-TA model and XML-Access Control technology, XBSIA (XML-Based Security Integrated Architecture), a new XML-based Security integrated solution, was designed and applied in the programming of OPEN-CLASS system. The results of practice proved that XBSIA solution has great security and dynamic maintenance.