These Links are from the Developer's Guide to XML from TechRepulic

XML security: An ongoing process

"While none of these specifications has been fully realized and adopted, both the W3C and Oasis are working hard to provide security standards for XML. A few early solutions are already available, such as Phaos XML from Phaos Technology and alphaWorks from IBM. Demand for XML security increases as XML usage spreads. Conventional means for securing documents interfere with XML’s ease of use, but standards to address an alternative are fast becoming a reality."

[TechRepublic]

Links:

• XML Encryption (Xenc)
  • "...the W3C and IETF propose a standard for encrypting the XML data and tags within a document. This would let you encrypt portions of a document, with the idea that only sensitive information needs to be protected. Encrypting portions of a document with different keys would allow you to distribute the same XML document to various recipients, but the recipients would only be able to decrypt the parts relevant to them."
    
• XML Signatures (XML-SIG)
  • "XML signatures are used to ensure that the content within an XML document hasn’t changed....When used in conjunction with XML encryption, an XML signature ensures that the data sent is the data received..."

• XML key management specification (XKMS)
  • "The XKMS protocol is a proposed standard maintained by the W3C...Several vendors, such as VeriSign, are heavily involved in this protocol and have developed toolkits and other applications to facilitate implementation of this specification."

• eXtensible access control markup language (XACML)
  • "XACML (also referred to as XACL) is used to define whether to permit requested access to a resource, whether it’s an entire document, multiple documents, or a partial document."

• Security assertion markup language (SAML)
  • "the counterpart to XACML that handles the actual exchange of authentication and authorization requests and responses. "

10:35:02 PM   comment [] |  Categories: My Organization, My Profession |  Topics: XML    

W3C XML-Encryption Minutes, Boston, MA, 01 March 2000

xml spy

xml news

W3C XML Encryption Working Group

xmlhack: Relax NG schemas for XML Encryption and XML Signature

Specification of Element-wise XML Encryption

XML Security Library

7:33:32 PM   comment [] |  Categories: My Organization, My Profession |  Topics: XML