Xml engine is a technology based on web service . xml engine realized seamless - connection to web service through xml . xml is in the position of “ message layer ” through whole web service application . xml engine aim at the operation of xml in the web service application , and so it can be called “ message layer gateway ” . on xml engine platform , we can dynamically load encrypting 、 decrypting 、 digital signing 、 validating and filter module to apache server to realize the correlated operating on the specified information via dynamic share object ( dso ) mechanism . this paper has studied xml and mainly analyzed how to realize xml signature / verify 在整个web服务应用中, xml处于“消息层”的位置,而xmlengine则针对web服务应用中的xml进行操作,可以称作“消息层网关” 。在xmlengine平台上,通过动态共享对象( dso )机制,将加密,解密,签名,验证,过滤等模块动态加载到apache服务器上,实现对指定信息的相关操作。本课题在对xml做出了研究的基础上,重点分析了在xmlengine上实现xml签名/验证的技术。
This system ' s architecture is based on the advanced pki techniques and encryptions techniques , configured with indispensable hardware for security technology to form a substantial application security platform . this integrated application security platform provides the muti - platform applications systematical uniform security services , mainly including user ' s identification , confidentiality and integrity for data transmission , access control , user ' s digital sign and verification , cryptographic key management etc , to fulfill the trans - computer - type and trans - operation system control & management system , which is independent of different business applications or business procedures 本设计方案以信息系统安全理论与系统工程学原理为基础，在网络环境下构建了应用安全平台，实现了一个跨硬件机型与操作系统台的、与具体应用部署方式无关的统一的安全策略配置，实现了包括身份认证、访问控制、数据机密性和完整性控制、应用密钥管理服务、抗抵赖、安全审计、数据安全等安全服务。
