Responsive image
博碩士論文 etd-0910107-143040 詳細資訊
Title page for etd-0910107-143040
論文名稱
Title
電子公文系統安全機制之設計與實作
Design and Implementation of the Security Mechanism for Electronic Documents
系所名稱
Department
畢業學年期
Year, semester
語文別
Language
學位類別
Degree
頁數
Number of pages
73
研究生
Author
指導教授
Advisor
召集委員
Convenor
口試委員
Advisory Committee
口試日期
Date of Exam
2007-07-19
繳交日期
Date of Submission
2007-09-10
關鍵字
Keywords
可延伸標籤語言、可延伸標籤語言加密、可延伸標籤語言簽章
XML, XML Signature, XML Encryption
統計
Statistics
本論文已被瀏覽 5622 次,被下載 0
The thesis/dissertation has been browsed 5622 times, has been downloaded 0 times.
中文摘要
資訊安全是越來越重要,不僅在電子商務佔有很重要的成分,對於一些工作上的資訊聯絡或是基本的傳輸資料,都是不可或缺的。從 1998 年 W3C 公佈 XML 標準至今已發展了將近十年,它補足了 HTML 在資料處理上的不足,而且 XML 因為它的跨平台性質,使它成為各種網路平台用來儲存交換資料的文件格式,W3C 更進一步的提出 XML 數位簽章和 XML 加密來處理 XML 安全。本研究將傳統 word 文件轉換成 XML 文件,將其應用於網路上,借助 Java 對密碼體系安全和對 XML 所提供的支援,實作出一個安全傳輸的電子公文系統。此外,也利用打字習慣的生物特徵做為身份認證機制來提高電子公文系統的可靠性。
Abstract
Information security has been becoming important. Not only play an important role in electronic commerce, but it is essential for communication of information at work or basic data transmission. It has been developed nearly ten years since the W3C announced the standard for XML which make up for HTML defects on data process. And cross-platform property is why it become the file layout standard that is used by variety platform of network to storage and exchange data. Furthermore, the W3C propose the XML Digital Signature and XML Encryption to enhance the security of XML. This study shows how to transform the traditional word format into XML format and apply it to network. Now, we implement a security transmission system of electronic documents from Java in support of Cryptography security and XML. Besides, we also adopt the typing biometrics features as identity authentication mechanisms to increase our system's reliability.
目次 Table of Contents
1 緒論 1
1.1 動機 ................................................................. 1
1.2 目的 ................................................................. 2
1.3 論文結構 ......................................................... 2
2 電子公文作業流程之相關問題 3
3 可延伸標籤語言與網路傳輸安全 5
3.1 XML ................................................................. 5
3.1.1 XML 的優勢 ................................................. 6
3.1.2 使用 XSLT 設計 XML 樣式表 ................... 13
3.1.3 XML 文件物件模型 ................................... 16
3.2 Security on XML .......................................... 18
3.2.1 XML Signature .......................................... 18
3.2.2 XML Encryption ......................................... 22
3.3 SSL 安全機制 ............................................... 26
4 系統設計與實作 28
4.1 系統開發工具 ............................................... 28
4.2 系統結構與實作 ........................................... 31
4.3 安全性分析 ................................................... 44
5 結論與未來展望 46
5.1 結論 .............................................................. 46
5.2 未來展望 ...................................................... 47
A 程式碼 51
A.1 XML 簽章 .................................................... 51
A.2 XML 簽章驗證 ............................................ 53
A.3 XML 加密 .................................................... 55
A.4 XML 解密 .................................................... 59
參考文獻 References
[1] Anthony Nadalin, JSR 106: XML Digital Encryption APIs,http://jcp.org/en/jsr/detail?id=106#2.
[2] Brett D. McLaughlin, Sr. All about JAXP, Part 1, 17 May 2005
[3] C. M. Sperberg-McQueen, XML-related Activities at the W3C, http://www.xml.com/pub/a/2001/01/03/w3c.html
[4] Ed Simon, Paul Madsen, Carlisle Adams, An Introduction to XML Digital Signatures, http://www.xml.com/pub/a/2001/08/08/xmldsig.html
[5] ISO 8879: 1986, Information processing - Text and office systems - Standard Generalized Markup Language (SGML).
[6] Hirsch, F. J., Introducing SSL and Certificates using SSLeay, Published in World Wide Web Journal, Summer, 1997.
[7] RFC 1521, MIME (Multipurpose Internet Mail Extensions), IETF, September 1993.
[8] RFC 1630, Universal Resource Identifiers in WWW, IETF, June 1994
[9] RFC 1737, Functional Requirements for Uniform Resource Names, IETF, December 1994.
[10] RFC 1738, Uniform Resource Locators, IETF, December 1994.
[11] RFC 2807, XML Signature Requirements, IETF, July 2000.
[12] RFC 3075, XML-Signature Syntax and Processing IETF, March 2001.
[13] RFC 3076, Canonical XML Version1.0, IETF, March 2001.
[14] R. G. Bartlett, M. W. Cook, XML Security Using XSLT, Proceedings of the 36th Hawaii International Conference on System Sciences (HICSS' 03), 2003.1.
[15] Sun Java Software, keytool - Key and Certificate Management Tool, http://java.sun.com/j2se/1.3/docs/tooldocs/win32/keytool.html, Copyright c 2001 Sun Microsystems, Inc. All Rights Reserved.
[16] Sean Mullan and Anthony Nadalin, JSR 105: XML Digital Signature APIs, http://jcp.org/en/jsr/detail?id=105.
[17] L´ıvia C. F. Ara´ujo, Luiz H. R. Sucupira Jr., Miguel G. Liz´arraga, Lee L. Ling, and Jo˜ao B. T. Yabu-Uti, User Authenticaton Through Typing Biometrics Features, IEEE TRANSACTIONS ON SIGNAL PROCESSING, VOL. 53, NO. 2, FEBRUARY 2005.
[18] W3C, Document Object Model (DOM) Requirements, W3C Working Group Note 26 February 2004.
[19] W3C, Extensible Markup Language (XML) 1.0 (Third Edition), http://www.w3c.org/TR/2004/REC-xml-20040204/. W3C Recommendation, 04 February 2004.
[20] W3C, Namespaces in XML 1.0 (Second Edition), W3C Recommendation 16 August 2006.
[21] W3C, URIs, URLs, and URNs: Clarifications and Recommendations 1.0, W3C Note 21 September 2001.
[22] W3C, XML Encryption Synatx and Processing, W3C Recommendation, 10 December 2002.
[23] W3C, XML Path Language (XPath) Version 1.0, W3C Recommendation, 16 November 1999.
[24] W3C, XML Schema Part 0: Primer Second Edition, W3C Recommendation 28 October 2004.
[25] W3C, Extensible Stylesheet Language (XSL) Version 1.1, W3C Recommendation 05 December 2006.
[26] W3 School, http://www.w3schools.com/dtd/dtd intro.asp, Introduction to DTD.
電子全文 Fulltext
本電子全文僅授權使用者為學術研究之目的,進行個人非營利性質之檢索、閱讀、列印。請遵守中華民國著作權法之相關規定,切勿任意重製、散佈、改作、轉貼、播送,以免觸法。
論文使用權限 Thesis access permission:校內校外均不公開 not available
開放時間 Available:
校內 Campus:永不公開 not available
校外 Off-campus:永不公開 not available

您的 IP(校外) 位址是 34.229.239.82
論文開放下載的時間是 校外不公開

Your IP address is 34.229.239.82
This thesis will be available to you on Indicate off-campus access is not available.

紙本論文 Printed copies
紙本論文的公開資訊在102學年度以後相對較為完整。如果需要查詢101學年度以前的紙本論文公開資訊,請聯繫圖資處紙本論文服務櫃台。如有不便之處敬請見諒。
開放時間 available 已公開 available

QR Code