Hermes消息安全的研究和改进

作者：曹灵,王万良 日期：2008-12-26/span> 浏览：2913 查看PDF文档

Hermes消息安全的研究和改进

曹灵,王万良
（浙江工业大学 信息工程学院，浙江 杭州 310014）

摘要：为了保证电子商务活动过程中数据的安全性，分析了ebXML消息服务的结构，针对Hermes平台的安全问题，采用XML加密技术，改进了原系统的服务器模块的消息安全处理过程。使用了ECC和AES混合加密的算法，利用DES对原文加密，ECC管理密钥，并通过Java2编程予以实现。研究结果表明，该方法弥补了原系统的安全缺陷，可以在电子商务系统中实现安全的数据交换。
关键词：ebXML；SOAP；XML加密
中图分类号：TP311文献标识码：A文章编号：1001-4551(2008)11-0041-03

Study and modification on Hermes message security
CAO Ling, WANG Wan-liang
(College of Information Engineering, Zhejiang University of Technology, Hangzhou 310014, China)
Abstract: Aiming at guaranteeing the security of data in electrical business transaction, the strudure of ebXML messaging service was analyzed. In order to solve the problem of Hermes message security, a new scheme based on XML security algorithm was presented to improve the message processing trocedure of the old server module, and it was implemented with a hybrid cryptosystem based on ECC and AES which combined their advantages, DES was used to encrypt original document and ECC was used to manage key, Java 2 programming was used to realize it. The experimental results show that the modified platform fixes the defects of original, and can be used in electrical business system.
Key words: electronic business XML(ebXML); SOAP; XML encryption
参考文献(References):
［1］陈恭和,昊晨.ebXML技术框架-全球电子商务的革命［J］.中国金融电脑,2001(12):8-12.
［2］OASIS ebXML Messaging Services Technical Committee. ebXML Messaging Service Specification, Version2.0［M］. OASIS ebXML Messaging Services Technical Committee,2002.
［3］刘君强,钱肖英.基于WS-Security的SOAP消息的安全规范［J］.电脑知识与技术:学术交流,2007(2):964-966.
［4］YEE P. Hermes Message Service Handler Development Guide, Version1.0［EB/OL］.[2005-08-12].  http://www.freebxml.org/mshdownload_1001.htm.
［5］张广梁,孟晓景,徐占鹏,等.Web服务消息级安全通信研究［J］.科技资讯,2007(20):129-130.
［6］毛春丽，吴献文.基于SOAP安全技术的电子商务安全性研究［J］.网络安全技术与应用，2006(7):47-50.
［7］SIDDIQUI B. Exploring XML Encryption, Part 1.Demonstrating the secure exchange of structured data［EB/OL］.[2002-03-01]. http://www.ibm.com/developerworks/library/x-encrypt/index.html?S_TACT=105AGX52&S_CMP=cn-a-x.
［8］王凯，刘鎏，李际军.基于中间件的企业基础信息交换系统[J].机电工程，2007，24（12）：9-12.